What data we store. What we don't.
Effective 2026-05-04. Concise on purpose.
What we don't collect
- No accounts, no passwords, no profile data.
- No payment data. Hub is free and currently runs no ads.
- No tracking cookies for advertising.
- No third-party social tracking pixels.
What we do store
- localStorage on your device: your daily-puzzle progress, current streak, completion times. This data lives in your browser only and is never sent to our servers. Clearing site data wipes it.
- Optional email reminders: if you enter your email after solving a puzzle, we store that email, the game you opted in from, basic UTM fields, and referrer in Supabase so we can send daily puzzle reminders. No account is created.
- Anonymous analytics: Google Analytics 4 and PostHog (if and when activated) record page views, browser type, country (city-level only), and which game you played. These tools strip PII (no IP storage on our side) and don't link sessions to identity.
- Server access logs: Cloudflare Pages stores standard web-server logs (IP, timestamp, page) for ~14 days for abuse detection. We don't analyze them.
Third-party tools we use
- Cloudflare Pages — hosts the site. Privacy policy: cloudflare.com/privacypolicy.
- Google Fonts — serves DM Sans, Fraunces, JetBrains Mono. Browser fetches fonts from Google's CDN.
- Google Analytics 4 (when activated) — anonymous traffic measurement.
- PostHog (when activated) — anonymous product analytics.
- Supabase — stores optional email-reminder signups. Game progress still lives in localStorage only.
Cookies
The hub does not set advertising cookies. It does not require a cookie-consent banner under EU regulation because no advertising or tracking cookies fire pre-launch. If we add ads (AdSense) post-launch, we'll add a consent mechanism appropriate to the user's region.
Children
The site does not knowingly collect data from anyone under 13. Since we collect almost no data, there's nothing specific to comply with under COPPA, but we'd remove any data if requested.
Your rights
- EU (GDPR): right to access, delete, port, or restrict any data we hold. Email ido@buildinthesun.com.
- California (CCPA): we don't sell personal information.
- Anywhere: clearing your browser data wipes localStorage progress. Email ido@buildinthesun.com to remove an optional reminder email.
Changes
We update this page when we change tools or practices. Material changes get a date stamp at the top.