Your data rights

What is processed, and on what legal basis

There are only three kinds of processing here, and they rest on different bases:

• Server request logs — IP address, page requested, time, user-agent. Legitimate interests (Art. 6(1)(f)): serving the site and protecting it from abuse. Kept for 14 days, then discarded.
• Your cookie choice — held in your own browser. Legitimate interests, and strictly necessary: it is what stops us asking again and what records your refusal.
• Analytics and advertising cookies — consent (Art. 6(1)(a)), and consent under the ePrivacy rules for the storage itself. Off unless you switch them on, and withdrawable at any time.

No special category data, no profiling that produces legal effects, and no automated decision-making about you.

Your rights

Under the UK and EU GDPR you have the right to:

• be told what is processed and why — this page and the privacy policy;
• access a copy of your personal data;
• have inaccurate data corrected;
• have data erased;
• restrict processing, or object to it;
• receive your data in a portable form;
• withdraw consent at any time, without giving a reason;
• complain to a supervisory authority.

An honest word about access and erasure

We hold no account, no email address and no identifier for you. A line in a request log cannot be traced back to a person by us, and we will not attempt to build a way of doing so in order to answer a request — that would create the very linkage the law is trying to prevent. In practice this means an access or erasure request will usually be answered by explaining that there is nothing held against you, which is Article 11 and Article 12(2) working as intended rather than a refusal.

Data held by Google as a result of advertising or analytics cookies you consented to is a matter between you and Google, who are a controller in their own right for it. Their own controls apply, and we will point you to them.

Withdrawing consent

Use Cookie choices in the footer of any page. It takes one click and needs no contact with us. Withdrawal stops the scripts loading from that point; it cannot un-run a script already running in the page you are on, so reload to be sure.

How to make a request

Email privacy@crossword-solver.net. We will respond within one month, as Article 12(3) requires, and will say plainly if the honest answer is that nothing is held.

International transfers

If you allow advertising or analytics, Google may process the resulting data outside the UK and EEA, including in the United States, under its own transfer mechanisms. If you allow neither, no personal data leaves the hosting arrangement at all. The server is located in [hosting country].

Complaints

You can complain to your local supervisory authority. In the UK that is the Information Commissioner’s Office; in Ireland the Data Protection Commission; elsewhere in the EEA, your own national authority. You do not have to contact us first, though we would rather you did.

California

California residents have the right to know, to delete, to correct, to opt out of sale or sharing, and not to be discriminated against for exercising those rights. The opt-out is the advertising category in Cookie choices, and the do not sell or share section of the privacy policy explains it. Global Privacy Control signals are honoured automatically.