Privacy Policy

1. Who We Are

TheCrossword.org ("we," "us," "our") is a small, independent website offering free crossword puzzles, a clue answers database and word tools at thecrossword.org. For the purposes of data protection law, we are the controller of the limited personal information described in this policy.

This Privacy Policy explains what information is processed when you visit the site, which third parties are involved, and the choices and rights you have. You can reach us at any time at [email protected].

2. At a Glance

TheCrossword.org is a static website. There is no user account system, no login, no newsletter, no leaderboard and no server-side database of users. We don't ask you to type personal information into the site, and nothing you do in a puzzle is sent to us.

The third-party services that do process data when you visit are Google Analytics (visitor statistics) and Google AdSense (advertising), plus our web hosting provider, which needs basic technical information to deliver pages to you.

3. Information We Collect

Emails you send us

If you email us (directly or via the contact form, which simply opens your own email app), we receive your email address, your name if you include it, and the content of your message. We use this only to read and reply to your message, and to fix any problem you report.

Technical information

Like any website, our hosting provider automatically processes standard technical information when your browser requests a page, such as your IP address, browser type, the page requested, the referring page and the time of the request. This is used to deliver the site, keep it secure and prevent abuse.

Information collected by Google

Google Analytics and Google AdSense collect information through cookies and similar technologies, as described in sections 5 and 6 below.

What we don't collect

We don't collect your puzzle answers, solve times, search queries or tool inputs on our servers, and we don't ask for sensitive information of any kind.

4. Local Storage in Your Browser

To remember your puzzles between visits, the site uses your browser's localStorage. This data is created and stored only on your device. It is never sent to us or to anyone else, and we cannot see it. It includes:

• Your progress on the puzzle you are currently solving
• Which archive puzzles you have completed, and the puzzle you last selected
• Your solving streak and Mini Crossword stats (puzzles solved, best time, streak)

Because this data lives only in your browser, it is not shared between devices or browsers, and it is erased if you clear your browsing data or use private/incognito mode. You can delete it at any time through your browser's settings (usually under "Clear browsing data" or "Site data"). We can't restore it for you, because we never have a copy.

5. Analytics (Google Analytics 4)

We use Google Analytics 4, a web analytics service provided by Google, to understand how visitors use the site: for example which pages are popular, how people arrive, and what devices and browsers they use. This helps us decide what to improve.

Google Analytics sets first-party cookies, such as _ga and _ga_<container-id>, which store a randomly generated identifier to distinguish visitors and sessions. These cookies can last for up to two years. Google Analytics 4 does not log or store full IP addresses. We use the aggregated reports only; we don't use Analytics to identify individual visitors.

You can prevent Google Analytics from collecting data about you by installing the Google Analytics Opt-out Browser Add-on, blocking cookies in your browser, or using a content blocker. See also Google's Privacy Policy.

6. Advertising (Google AdSense)

We show advertising through Google AdSense so that we can keep the site free. When ads are displayed:

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet.
• Other certified third-party ad vendors and ad networks may also serve ads on our site through Google and may use their own cookies or similar technologies.
• Advertising cookies (for example __gads, __gpi, IDE and similar; names can change) may record ad impressions, limit how often you see the same ad, measure ad performance and help detect fraud.

Ads can be personalised (based on your interests and browsing history) or non-personalised (based on general context such as the page content and your approximate location). Where the law requires your consent for personalised advertising, for example in the European Economic Area, the UK and Switzerland, personalised ads are only shown in line with the consent choices you make, and you can change those choices at any time.

To learn more, see How Google uses information from sites or apps that use its services and How Google uses cookies in advertising. Our publisher information is listed in our ads.txt file.

7. How to Opt Out of Personalised Ads

You have several ways to control advertising cookies:

• Google: turn off personalised ads in Google Ads Settings (My Ad Center).
• Other participating companies (US): use the Digital Advertising Alliance's opt-out tool at aboutads.info/choices.
• Other participating companies (Europe): use youronlinechoices.eu (UK: youronlinechoices.com/uk).
• Your browser: block or delete third-party cookies, or use your browser's tracking protection features.

Opting out does not remove ads; you will still see ads, but they will not be personalised based on your browsing. Clearing your cookies may reset your opt-out choices.

8. Legal Bases for Processing (GDPR / UK GDPR)

If you are in the EEA, the UK or Switzerland, we rely on the following legal bases:

• Consent for analytics cookies and personalised advertising cookies, where consent is required. You can withdraw consent at any time without affecting processing that took place before.
• Legitimate interests for delivering and securing the website, showing non-personalised ads to fund a free service, and replying to messages you send us.

9. Your Rights

EEA, UK and Switzerland (GDPR)

You have the right to access, correct or delete personal data about you, to restrict or object to processing, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

California and other US states (CCPA / CPRA and similar laws)

You have the right to know what personal information is collected, to request deletion or correction, and to opt out of the "sale" or "sharing" of personal information, including sharing for cross-context behavioural advertising. We do not sell personal information for money. Cookies used by Google and other ad partners to personalise ads may count as "sharing" under these laws; you can opt out using the options in section 7. We will not discriminate against you for exercising your rights.

How to exercise your rights

Because we have no accounts, the only personal information we hold directly is the content of emails you send us. To make a request about that, email [email protected]. Data held by Google is controlled through your Google settings and the tools above; data in your browser's local storage can be deleted by you at any time. We will respond to requests within the time limits set by applicable law (usually 30 days for GDPR requests, 45 days under the CCPA).

10. Data Retention

• Emails you send us: kept only as long as needed to handle your message, then deleted.
• Google Analytics: user-level data is retained for no longer than 14 months; aggregated reports contain no personal identifiers.
• Advertising cookies: retained according to Google's policies and your browser settings.
• Local storage: stays on your device until you clear it.

11. International Data Transfers

Google may process data in the United States and other countries. Google relies on legal safeguards such as the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses for these transfers.

12. Children's Privacy

TheCrossword.org is a general-audience site and is not directed at children under 13 (or under 16 in the EEA and UK). We do not knowingly collect personal information from children. If you believe a child has sent us personal information, please contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time, for example if we add or remove a third-party service. The "Last updated" date at the top of this page shows when it was last revised.

14. Contact Us

If you have any questions about this Privacy Policy or how data is handled on this site, please contact us:

• Email: [email protected]
• Contact page: thecrossword.org/contact/