Privacy policy

What we collect

• Contact form submissions — name, email address, and message text when you contact us. Also logs the request IP address for abuse prevention. Retained for 90 days in Vercel KV, then deleted.
• Email subscriptions— email address only, via Beehiiv. Subject to Beehiiv's own privacy policy. You can unsubscribe at any time from any email.
• Puzzle progress— your daily completion state and streak are saved in your browser's local storage. This data never leaves your device and is not transmitted to our servers.
• Analytics — page views via Vercel Analytics. Cookieless and anonymized by design; no personally identifiable information is stored.
• Error reports — if the site crashes, Sentry captures a stack trace and may include the URL and browser type. No account data is included.

Why we collect it

• Contact form data — to respond to your message (legitimate interest).
• Email subscriptions — to send you the newsletter you asked for (consent).
• Analytics — to understand which content is useful so we can make more of it (legitimate interest).
• Error tracking — to fix bugs before they affect other readers (legitimate interest).

Third-party processors

We pass data to these services only as needed to operate the site:

• Vercel — hosting, edge functions, and KV storage (contact form data)
• Beehiiv — email newsletter platform
• Cloudflare — DNS and WAF (sees request IPs)
• Sentry — error tracking
• Resend — transactional email (contact form acknowledgment)
• Shopify — storefront and checkout (processes billing and shipping data for orders)
• Printful — print-on-demand order fulfillment (receives shipping address)

We do not sell your data to any party. We do not use your data for advertising.

Data retention

• Contact form submissions — 90 days, then deleted from KV.
• Email list — retained until you unsubscribe. Unsubscribe link in every email.
• Analytics — never stored as raw events. Vercel Analytics aggregates anonymously.
• Puzzle progress — browser local storage only; persists until you clear it yourself.

Your rights

GDPR (EU/UK residents): You have the right to access, correct, delete, or export any personal data we hold about you. You may also object to processing or request that we restrict it.

CCPA (California residents): We do not sell personal information. You have the right to know what we collect and to request deletion.

To exercise any of these rights, contact us with your request. We will respond within 30 days.

Cookies

We set one item in your browser: puzzle progress in localStorage. This saves your daily completion and streak locally — it never leaves your device.

Vercel Analytics is cookieless. We do not set any third-party advertising cookies. We do not use tracking pixels.

Contact

For data requests or privacy questions, use the contact form. We are a one-person operation; we respond to every message.