Privacy policy

In short: this website needs no account, sets no cookies and loads nothing from third parties. We only store what you choose to share.

Controller

Niels Hegmans, heimseiten.de, Johannes-Dech-Str. 49, 50737 Köln, Germany (see imprint).

Hosting

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre in Germany. A data processing agreement is in place. No data is transferred to third countries.

Server logs

Visits are not logged in general. Only requests to typical attack paths (e.g. probing for admin logins) are stored with a shortened IP address to detect attacks, and deleted after 14 days (Art. 6(1)(f) GDPR, legitimate interest in security). To slow down abuse (e.g. mass creation of puzzles) the server keeps IP addresses briefly in memory — for at most 24 hours and never on disk.

Your puzzles

While you only use the editor, everything stays in your browser (localStorage). When you press “Create link”, the puzzle (title, words, clues, secret word) is stored on our server so others can solve it through the link. Unless you tick “Show it in the public collection”, it can only be reached through that link; with the box ticked it appears in the collection and can be found by search engines. Your edit link lets you change the puzzle or take it out of the collection; to delete it, email us the link. We count how often a puzzle is played and solved, without storing who did it (Art. 6(1)(b) and (f) GDPR).

Solving together

In a room for solving together, the nickname you choose, your colour, your letters and your cursor position are sent to the others in the room. Rooms exist only in the server’s memory and disappear at the latest 12 hours after the last activity; nothing is stored permanently.

Reports

If you report a puzzle, we store the puzzle, your optional text and the time — not who reported it.

Browser storage

Your browser’s localStorage holds your current draft, your solving progress, your light/dark choice and whether sound is on. This is needed only for the site to work (§ 25(2) no. 2 TDDDG), is never transmitted and can be cleared at any time in your browser settings.

Fonts

All fonts are served from our own server. No requests go to Google Fonts or any other service.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority, for example the data protection authority of North Rhine-Westphalia.