Privacy, in plain language.
Activities, saves and share links.
Puzzle inputs and PDF creation run in your browser. Public activity inputs are not sent to OpenAI. Saved designs and bookmarks use local storage on this device. A shared URL fragment contains the exact title, words and settings; anyone with that link can read them. Browser-local saves do not transfer automatically between domains.
Aggregate activity counts.
The site counts views and actions by UTC day, clean page path, event and country only when a trusted server signal is configured. These are event counts, not unique visitors or Search Console data. Counts do not include a visitor ID, custom words, full referrer, query or share fragment. They expire after 90 days. Global Privacy Control, Do Not Track and the device choice below disable application measurement.
Advertising.
Advertising is off by default. If activated after review, it is limited to individually reviewed editorial pages and eligible US visitors who choose to allow it. Unknown location, other regions, owner sessions and privacy opt-outs are excluded. Children’s activity pages, generators, saves, private/admin pages, PDFs and utility pages do not carry ads through this release. The local choice is not a certified CMP; Google Privacy & messaging and applicable regional privacy obligations require separate publisher configuration and review.
Children’s activities.
Some activities may be used by children. An adult-facing label does not settle child-directed classification. Public tools require no child account or name submission. Their advertising remains off. Audience classification and children’s privacy requirements must be reviewed before any additional data collection or future advertising there.
Owner login and security.
The private dashboard uses an HTTP-only session cookie and a password hash. It expires after inactivity. Installation also uses a short-lived session for form security. The host may keep separate request and security logs. Application abuse limits use a daily keyed hash of the request address and action; the raw IP is not stored by those rate buckets, which expire within 48 hours.
AI and Search Console.
Owner topic notes and the public activity inventory are sent to OpenAI only when a bounded draft request runs. Drafts remain private until reviewed. API credentials and Google service-account material are stored encrypted with a key kept outside the public website directory. Search Console integration requests a bounded sample of US web query/page performance for the configured property. The OpenAI key does not grant access to Search Console.
Contact and retention.
Contact messages store the sender’s name, email, subject and message in the private inbox until the publisher deletes them. Do not submit sensitive information or a child’s personal details. No marketing list is created. Use Contact → Privacy question to request deletion. Articles and source notes remain until the publisher removes them.