Privacy Policy
How we protect and handle your data
1. Introduction
Max Hafer operates the website mind-sprout.net under the Mind-Sprout name. This Privacy Policy explains how information is collected, used, and protected when you use the free word search and Sudoku puzzle generator.
Data Controller: Max Hafer
Hajo-Rüter-Straße 14
65239 Hochheim am Main
Germany
Email: print.design2212@gmail.com
Phone: +49 1578 2835232
2. What Data We Collect
2.1 No Personal Accounts
We do NOT require registration, accounts, or login. We do NOT collect your name, email address, or any personally identifiable information directly.
2.2 Automatically Collected Data
Only once you have consented to analytics, Google Analytics 4 records the following about your visit. Without your consent none of it is collected, because the analytics script is never loaded:
- IP Address: Used by Google to derive a rough region, then discarded; it does not appear in the reports
- Browser Information: Browser type, version, and language settings
- Device Information: Operating system, screen resolution
- Usage Data: Pages visited, time spent, puzzles created
- Referrer URL: The website you came from
The page address we report is deliberately shortened to the domain and the path. Everything after a question mark — which on this site can hold the words you typed into a puzzle, a search term or an ID — is removed before the address is sent.
2.3 Cookies and Locally Stored Entries
Before you decide on the cookie banner, this website sets no cookies at all and requests nothing from third-party servers. The site needs no cookie of its own to work. The two cookies below appear only after you press "Accept", and they are deleted again when you withdraw your consent.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
_ga | Google Analytics 4 | Tells returning visitors apart from new ones | 2 years |
_ga_<property ID> | Google Analytics 4 | Holds the state of the current visit | 2 years |
Both are first-party cookies with SameSite=Lax. They are not sent along by other websites.
The entries below are not cookies. They live in your browser's local storage on your own device and are never transmitted — not to us and not to anyone else. They hold your own decision, your own settings and your own puzzle progress, which is why they are stored without consent. The one exception is the last row, which is written only while analytics is switched on.
| Entry | Storage | Purpose | Lifetime |
|---|---|---|---|
cookie-consent | Local storage | Your decision on the cookie banner | Until you clear your browser data |
puzzleFilters | Local storage | The filters you chose in the word search browser | Until you clear your browser data |
sudokuFilters | Local storage | The filters you chose in the Sudoku browser | Until you clear your browser data |
mindsprout-play-v1:* | Local storage | Saved library word searches and Sudokus, including found words, entries, used hints and up to 50 undo states | Until you clear your browser data; restarting a puzzle replaces its progress |
daily-challenge-history-v2 | Local storage | Your daily challenge streak and past completions | Until you clear your browser data |
daily-challenge-progress-v2-<date>-<language> | Local storage | Your progress in today's daily puzzle | Cleaned up once the day is over |
mindsprout-analytics-opt-out | Local storage | A permanent opt-out from measurement; written only if you open a page with ?ms_internal=1 | Until you clear your browser data |
daily-return-tracked-v2-<date> | Session storage | Makes sure a return visit is counted only once. Written only with analytics consent | Until you close the tab |
3. How We Use Your Data
We use collected data for the following purposes:
- To provide and maintain the website functionality
- To understand which puzzles and features are most popular
- To improve user experience and website performance
- To detect and prevent technical issues or abuse
- To comply with legal obligations
4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your data based on:
- Legitimate Interest (Art. 6(1)(f) GDPR): To operate and improve our website
- Consent (Art. 6(1)(a) GDPR): For analytics cookies (you can withdraw consent anytime)
- Legal Obligation (Art. 6(1)(c) GDPR): To comply with legal requirements
Storing information on your device and reading it back is additionally governed by § 25 TDDDG (the German Telecommunications Digital Services Data Protection Act, which replaced the TTDSG on 14 May 2024). Analytics cookies are stored only with your consent under § 25(1) TDDDG. Your own settings and puzzle entries fall under § 25(2) no. 2 TDDDG, because they are strictly necessary to provide the service you asked for.
5. Third-Party Services
5.1 Google Analytics 4
We use Google Analytics 4 (provided by Google Ireland Limited / Google LLC) for website analytics.
- Data collected: Page views, referrers, browser info (no direct personal identifiers)
- Data location: EU and/or USA (Google infrastructure)
- Data transfer: EU Standard Contractual Clauses apply
- Privacy Policy: Google Privacy Policy
5.2 Hosting Provider
Our website is hosted on Vercel's global infrastructure. Server logs may be kept for security purposes.
6. Data Retention
- Analytics Data: Retained for 90 days, then permanently deleted
- Server Logs: Retained for 7 days for security purposes
- Your consent decision: Kept in your browser's local storage, not in a cookie, until you clear your browser data
- Puzzles Created: NOT stored on our servers (generated client-side only)
7. Your Rights Under GDPR
If you are in the European Union, you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent for analytics cookies anytime
To exercise your rights, contact us at: print.design2212@gmail.com
8. Children's Privacy (COPPA)
Our website is designed for general audiences including children. We do NOT knowingly collect personal information from children under 13.
No Registration Required: Children can use our puzzles without providing any personal information.
If you believe we have inadvertently collected information from a child under 13, please contact us immediately at print.design2212@gmail.com and we will delete it promptly.
9. International Data Transfers
Your data may be transferred to and processed in the United States (where Vercel's servers are located). We ensure adequate protection through:
- EU Standard Contractual Clauses (SCCs)
- Vercel Data Processing Addendum
- Appropriate technical and organizational security measures
10. Data Security
We implement appropriate technical and organizational measures to protect your data:
- HTTPS encryption for all data transmission
- Secure hosting infrastructure (Vercel)
- Regular security updates and monitoring
- Limited data collection (privacy by design)
- No storage of puzzle content on our servers
11. Your Choices
- Cookie Settings: Use the "Cookie settings" link in the footer to bring the consent bar back and change or withdraw your decision at any time. Withdrawing deletes the analytics cookies immediately
- Browser Settings: Configure your browser to block or delete cookies
- Do Not Track: We respect Do Not Track (DNT) signals
- Opt-Out: Reject analytics cookies to prevent tracking
12. Supervisory Authority (EU)
If you are located in the European Union and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.
Find your local authority: European Data Protection Board
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Modified" date. We encourage you to review this policy periodically.
14. Contact Us
For any questions about this Privacy Policy or to exercise your rights, please contact us:
Max Hafer
Hajo-Rüter-Straße 14
65239 Hochheim am Main
Germany
Email: print.design2212@gmail.com
Phone: +49 1578 2835232