Controller
Softcen
Haravatie 3
90530 Oulu
Finland
Email: contact@softcen.com
Puzzles created on your device
Custom titles, word lists, puzzle settings, and play progress remain in your browser while you work. They are not sent to the server unless you choose to create a private share link.
Private share links
When you select Share, the puzzle title, words, settings, and seed are stored on the server so the same puzzle can be opened from an unlisted link. Share links expire after 180 days. Anyone who receives the link can open the puzzle, so only share it with people you trust.
This processing is necessary to provide the sharing feature you request. Expired share records are removed by an automated daily cleanup.
Tokens and search engines
The identifying share token is stored as a cryptographic hash. Shared puzzle pages are marked as unlisted and instruct search engines not to index or follow them.
Cookies and browser tracking
ClearSearch Puzzles currently does not use advertising, tracking cookies, browser storage, tracking pixels, fingerprinting, or third-party analytics. It therefore does not display a consent banner. If this changes, non-essential technology will not load before any legally required consent.
The HTML contains a non-executing AdSense account-verification meta tag, and the site publishes an ads.txt ownership record. These plain text records do not contact Google, place cookies, request ads, or collect information from the browser.
Before advertising is enabled
This notice and the Cookies page will be updated before advertising code is activated. Where required, ClearSearch will use a Google-certified consent management platform, provide the required advertising disclosures, and let visitors revisit their privacy choices. Advertising will remain off private share links, print views, legal pages, and error or other non-content screens.
Server logs and AWStats
The web server records a masked IP address, requested page, browser user agent, response status, transferred bytes, and date and time. Share-link tokens and query strings are replaced or omitted before they reach the access log. AWStats analyses these server-side logs without placing anything in your browser. Raw access logs are automatically deleted after 30 days.
The legal basis is the controller's legitimate interests under Article 6(1)(f) GDPR: keeping the service secure, detecting abuse, diagnosing failures, and measuring aggregate service performance. The controller has chosen a limited, server-side method and restricts the reports to authorised administrators.
For share-link rate limiting, the server also holds the requesting IP address in volatile memory for no longer than the current one-minute rate-limit window. It is not written to the application database.
Recipients and location
Hosting administrators and the hosting provider may process this information only as needed to operate and secure the service. The production deployment is permitted only after the operator has verified and recorded that production data and logs remain in the EU. ClearSearch Puzzles does not sell personal data or send it to advertising or third-party analytics providers.
Your rights
Depending on the circumstances, you may request access, correction, erasure, or restriction; object to processing based on legitimate interests; and lodge a complaint with a data protection authority. Because access logs are masked before storage, it may not be possible to identify a particular visit from the information you provide.
Contact contact@softcen.com. You may also contact Office of the Data Protection Ombudsman.
Last updated: 8 August 2026.