Privacy

The short version: Word Puzzle Toolkit doesn't ask you to sign in, doesn't sell your data, and keeps tracking to the minimum needed to run the site.

Last updated: 26 April 2026.

What we collect

• Server access logs. Standard web-server logs record the requested URL, timestamp, HTTP response code, IP address, and user-agent string. These are retained for up to 30 days for security and debugging purposes.
• Cookieless analytics. We use a self-hosted, privacy-respecting analytics tracker (regeninsite.com) to collect aggregated usage statistics — which tools are used, which pages are viewed, and how people move between them. The tracker sets no cookies, uses no browser fingerprinting, and does not link page views to any personal identifier. It can be disabled at the server level by clearing two environment variables; when disabled, no analytics script is sent to your browser at all.
• We do not collect: account data, login credentials, email addresses, contact lists, payment details, location beyond what's implied by IP address, or any data from your device beyond what your browser sends with a standard HTTP request.

Cookies

The site itself sets no cookies. The cookieless analytics tracker described above sets none either. If we add advertising in future (see below), this section will be updated to list any cookies set by an advertising provider.

Third parties

• Analytics provider — page-view data is sent to regeninsite.com for aggregated reporting. No cookies, no personal identifiers.
• CDN providers — Bootstrap and Font Awesome are served from third-party CDNs (jsDelivr, cdnjs). Your browser contacts those hosts for CSS, fonts, and icons. Their privacy policies apply to those connections.

Advertising

Word Puzzle Toolkit does not currently display ads. We are evaluating Google AdSense as a way to keep the toolkit free. If and when ads go live, this notice will be updated to:

• name Google AdSense as an advertising third party,
• list the cookies its scripts set on your device,
• link to Google's advertising policies and the "How Google uses information from sites or apps that use our services" page,
• describe the consent choices presented to visitors in the EEA, the UK, and Switzerland via a Google-certified consent management platform.

Until that change is made and announced at the top of this page, no advertising scripts run on this site.

Your rights (UK GDPR)

You have the right to access, correct, delete, or object to the processing of any personal data we hold about you. Because we keep no account data, the practical reach of these rights is limited to access logs (which expire automatically) and the aggregate analytics dataset (which carries no identifier mapping back to you). To exercise your rights or ask a question, get in touch.

Changes

We may update this policy as the site evolves. Material changes will be announced at the top of this page and the "Last updated" date above will move forward. The full edit history is recorded in this site's source code.