Privacy

Puzzle Press makes your book inside your browser. Your word lists, titles, settings and the PDFs it makes stay on your computer. Here is everything that does leave it, and who sees it.

What stays on your computer

• Every word, title and setting you enter, the puzzles, and the interior and cover PDFs. The book is built by code running in your browser; nothing is uploaded to make it.
• After you unlock, your browser keeps a note of it in local storage (puzzlepress.license: your email and a reference to your payment) so you don't have to unlock again. Clearing this site's data removes it.
• The first time you open a page of this site, your browser keeps a one-word note of where you came from in local storage (puzzlepress.src): the site that linked here, such as google_com, or the page of this site you came from, or direct. Not the search you typed, and not a full address. Clearing this site's data removes it.

Puzzle Press sets no cookies and has no accounts.

What your browser sends

• Page requests. Like any website, the pages, scripts, fonts and sample PDFs are fetched from this site, which runs on Cloudflare. Cloudflare logs each request with your IP address, browser name and the address asked for. We read that log to count visits and to tell people from robots, and that includes looking up which network an address belongs to.
• Step counters. As you use the generator, the page fetches tiny empty images named after a step, such as /px/tool.gif (scrolled to the generator), /px/touched.gif (changed a setting), /px/made.gif (a book was made) and /px/pay.gif, each at most once per page load. The file name is the whole message: no word, title or setting, no ID. That is how we know how many people get as far as each step. A test in the code (test/privacy.mjs) types a made-up word into the generator, makes and downloads a book, and checks that the word never leaves the browser.
• Links we post elsewhere. Some links we publish off this site start with /go/ and forward you to a page here. Each time one is used, we keep a note of which link it was, the time, your network's owner name and country, and whether the browser says it is a robot. We don't keep your address. Notes are deleted after 90 days.
• Cloudflare Web Analytics. Each page loads Cloudflare's analytics script, which reports the page viewed, the page you came from and how fast it loaded. Cloudflare describes it here.

If you pay

• Payment happens on Stripe's checkout page, not here. Stripe handles your card and what its checkout asks for under Stripe's privacy policy. We see the payment record in Stripe, including your email address. We never see your card number.
• The Buy link carries that one-word note to Stripe (as client_reference_id=src-google_com, for example), so the payment record says which site or page led to the sale.
• To unlock, the email you type is sent to this site's server, which asks Stripe whether that email has a completed Puzzle Press payment and answers yes or no. The server doesn't store the email.

Questions

Email support@bananafest-destiny.com. The rest of the terms (what you own, refunds) are in Terms.

The site's code is public, so you can check all of this yourself: github.com/walkertbrown/vibe-cider (the app folder).