Privacy & Cookie Policy

Information kept on your device

Saved puzzles, recent activity, timers, notes, game progress, reduced-motion preference and other device settings use browser localStorage. This information stays on that browser and is not synced to an account. It remains until you use Device settings to clear it, clear the browser’s site data, or remove the browser profile.

Anonymous product measurement

We use a first-party Cloudflare Analytics Engine endpoint to understand whether pages and puzzles work. It records events such as a page view, puzzle start, completion, print or download; the page path and published puzzle identifier; puzzle type; coarse device class and country code; and limited numeric counts such as elapsed time or completion score. A random session token kept only in sessionStorage lets us calculate pages per session and is not reused after the browser session ends.

The endpoint uses a strict allowlist and rejects raw search terms, generator word lists, trivia answers, Sudoku entries, email addresses and other free-form puzzle input. It does not set an analytics cookie or build a cross-session user profile. Collection is skipped when Global Privacy Control or the browser Do Not Track signal is enabled. Product-event records are retained by Cloudflare Analytics Engine for three months.

Cookies and similar technologies

Pencil & Grid does not currently set advertising cookies because advertising is disabled during the application and consent setup stage. Essential browser storage supports saved progress and preferences. Any future advertising or additional analytics provider will require this policy and the relevant consent controls to be updated before those technologies run.

Email and messages

The demo signup records only that a form was completed; it does not keep the email address in localStorage. If you email us, we use the address and message only to reply, investigate the issue and keep a reasonable support record. You may ask us to delete that correspondence unless we must retain it for security or legal reasons.

Hosting and security logs

Our hosting and security provider may process an IP address, requested URL, browser or device information, time of request and security signals to deliver the site, prevent abuse and diagnose failures. We do not add IP addresses to product analytics events.

Google advertising

Advertising is currently switched off. If Google AdSense is activated after approval, Google and its partners may use cookies or similar technologies and process device, network, page-view and ad-interaction information to provide, measure and protect advertising. Learn how Google uses data when you use partners’ sites or apps at Google’s partner-sites policy.

Before personalized advertising is served in the European Economic Area, United Kingdom or Switzerland, we will use a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework. Refusing optional consent will not block access to a puzzle.

Children and classroom use

The library includes family and classroom activities. Pages explicitly directed to children do not load advertising. We do not knowingly collect account profiles from children. A parent, guardian or teacher can contact us about a child’s information or use Device settings to clear local progress.

Sharing, retention and your choices

We do not sell personal information. Service providers receive only the information needed to host, secure, measure or—after activation and consent—fund the service. Local puzzle data follows the retention controls described above; support messages are kept only as long as reasonably needed to answer and resolve the request.

Use Device settings in the footer to clear saved progress and preferences. For access, correction, deletion or privacy questions, email hello@pencilgridpuzzles.com or use the contact and corrections page.

Policy changes

Material changes will be published on this page with a new review date before the affected processing begins.