Home › Privacy

Privacy

The short version: there are no cookies, there is no account, and the books you make never leave your browser.

Last reviewed 12 September 2026.

Your books stay on your machine

Puzzle generation and PDF export both run entirely in your browser. Books are saved in your browser's own storage on the device you made them on. They are never uploaded, and there is no server that holds them — which also means clearing your browser data deletes them, and nobody can restore them for you. Export a project file if you want a backup.

There are no cookies

The site sets no cookies at all. Nothing tracks you between sites, and nothing follows you between visits on different days.

What the analytics record

The site keeps first-party analytics so it is possible to tell which pages are useful. Each event records the page path, a referring site's host name (never a full URL), a country, whether the device is a phone or a desktop, and any campaign tags a link carried.

Two things about how visitors are counted:

• The visitor identifier is a one-way hash salted with the current date. The same person on two days produces two different hashes, so visits cannot be joined across days, and the hash cannot be reversed into an IP address.
• A session identifier is held in sessionStorage, which the browser discards when the tab closes. It exists so a single visit reads as one journey rather than five disconnected events.

No names, email addresses or account identifiers are attached to any of it, because the site has none to attach.

The custom-theme feature

If you type a topic into the optional AI theme generator, that topic text is sent to Cloudflare's Workers AI to produce a word list. The topic and its resulting word list are cached at the edge for a week so that asking for the same topic again is instant — but neither is written to any database of ours, and neither is associated with you. To limit abuse the endpoint counts requests against a day-salted one-way hash of the requesting IP address; that counter stores no address and expires.

Everything else in the app — every generator, the editor, export, covers — runs locally and sends nothing anywhere.

Payment

Purchases are processed by Polar, and licence activation checks a key against Polar's API. Card details are handled entirely by Polar and are never seen by this site or by me. Licences bought through AppSumo are validated against AppSumo's licensing API instead.

Email

If you enter an email address to receive a free puzzle pack, that address goes to Zoho Campaigns, which sends the mail. It is used for that and nothing else, every message has an unsubscribe link, and the address is not sold or shared.

Hosting

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes requests to serve them and keeps its own operational logs.

Your choices

• Clearing your browser storage removes every book, preference and licence key held locally — permanently.
• Blocking a.js stops analytics entirely. Nothing on the site depends on it.
• To ask what is held against an email address, or to have it removed, email [email protected].