The short version
Puzzles are generated entirely in your browser. Nothing is uploaded while you type, generate, or print; there is no server that receives your word lists, no account system, and no sign-in. We don’t ask for your email to print, download a PDF, or copy a share link. We do run analytics to see which tool, theme, and print settings are actually used (details below), but it never receives your word list or anything else you type.
What stays on your device
Your last-used settings and word lists are stored in this browser’s local storage so the page remembers them next time. Clearing site data in your browser settings erases them completely. Copy link works differently: it packs your puzzle configuration, word list included, into the web address itself, after a “#” rather than a “?”. That part of an address is never sent to a server, so this site’s host does not receive it and it will not show up in our access logs. It still travels with the link itself, though: whoever you send it to can see the word list, and it can end up in the recipient’s browser history or a chat app’s link preview. Some mail providers and corporate link-scanning tools also rewrite links they relay, in which case the whole address, including the part after the “#”, passes through that service’s own servers on its way to the recipient. Treat a share link the way you’d treat the word list itself: fine to send to someone you trust, not something to post somewhere public.
Analytics
This site uses Google Analytics to understand aggregate usage: which of the three makers people use, which built-in themes get picked, and whether a visit ends in a print or a PDF download, along with ordinary traffic information like which page was viewed and roughly where visitors are arriving from. Every event we send is one of a short, fixed list: theme_selected, print_click, pdf_download. Each one carries only the setting names involved (a theme’s name, a paper size, a difficulty level, a copy count). None of them carry your word list, your puzzle’s content, your title text, or anything else typed into a text field. That content still never leaves your browser, exactly as before this section existed.
Google Analytics itself sets cookies to distinguish visits, and its parent company processes the traffic and event data we send it under its own privacy policy. For visitors in the EU, EEA, UK, and Switzerland, analytics is off by default and a banner asks first; declining or ignoring it means no analytics data is stored or tied to your visit. Outside those regions analytics runs by default, in keeping with how those visitors already expect most websites to behave. You’re still welcome to opt out. .
If advertising is ever added, this page will describe any additional cookies before they appear.
Every third-party request a page can make
This list is the complete accounting: nothing else on the site talks to an outside server. If you spot a fourth request we haven’t listed here, tell us.
- Google Analytics (described above): where consent is required, the underlying script may still load, but no analytics data is stored or tied to your visit until you answer the banner.
- Cloudflare’s own performance beacon: this site’s host runs a beacon at the account level that reports page-load timing, never word lists, puzzle content, or anything you type. It only loads when Cloudflare serves an uncached copy of the page, so a visit served from cache, the common case, skips it. It is not currently gated by the consent banner; if that matters to you, contact us. Cloudflare also configures standard network-error reporting for its own infrastructure (a browser tells Cloudflare directly if a connection to it fails); that one is entirely Cloudflare’s, not a setting either of us chooses.
- The PDF library’s CDN fallback (described below): only if the self-hosted copy fails to load, which should be rare.
Typefaces
Typefaces, including Atkinson Hyperlegible, the low-vision face the puzzles are set in, are served from this site, not from Google Fonts or any other outside host. Downloaded PDFs embed the same typeface too: exporting a PDF does fetch the font files, but from this same site, the same copy that ships with the page, never from Google or another font host.
The PDF library
PDF download uses a JavaScript library that ships with the site itself, so it normally loads with no outside request at all. Only if that local copy can’t load does the browser fall back to fetching it once from a public CDN and caching it. That fallback request carries no information about you or your puzzle beyond ordinary connection metadata.
Contact
Questions or corrections: contact us.