Privacy,
in plain language.

Scope and identity

Who this notice is about.

This policy applies to the Themed Word Search Mix website and its pages about the independently published puzzle-book series.

The available project records identify Viktor Churek as the author and puzzle creator. They do not identify a separate operating company, postal privacy address or data protection officer. Those details remain to be confirmed rather than inferred or invented.

Data we handle

Small, specific data flows.

Purposes and grounds

Why data is used.

Optional analytics and optional marketing are separate choices. Neither is required to receive the requested free puzzle.

Free puzzle data

Words follow the choice you make.

A confirmation request stores the selected theme, source, grid, difficulty, directions, word count and email address. The address is also used as the free-limit safeguard. The actual email address and custom-word text are not copied into analytics events.

Custom words are normally separated into individual candidates after delivery, deduplicated and retained without a link back to the email address. They require review before joining the working word database.

The marketing checkbox is optional. When selected, the confirmation link also confirms that separate choice. Each future marketing email must provide an unsubscribe route.

Cookies and local storage

Choice before analytics.

The choices “Allow analytics” and “Decline” are both available in the notice. The fixed “Privacy choices” control reopens it at any time. The Google tag is blocked and sends no request before permission. Declining removes the tab-session identifier, attempts to remove known first-party Google Analytics cookies and stops future optional collection from this site.

Sharing and providers

Two analytics destinations.

After permission, analytics events can go to this website’s own collector and to Google Analytics, a service provided by Google LLC. The Google tag is not loaded after a decline. No Google Ads tag or session-replay service is connected, and advertising storage, advertising user data and ad personalisation remain denied.

• Hosting: Hostinger infrastructure may process technical requests and security-log data; exact processing locations and log retention remain to be confirmed.
• Email delivery: provider details must be confirmed when delivery is connected.
• First-party analytics: consent-gated interaction events are written to this website’s database under a random tab-session identifier.
• Google Analytics: consent-gated measurement is sent to the site’s configured GA4 web stream. Google may process data in other countries under its applicable terms and safeguards. See Google’s Privacy Policy.
• Advertising or behavioural profiling: not activated by this configuration.
• Marketplace links: direct Amazon.com links are active. With permission, analytics may record that a marketplace link was selected, but no visitor identifier is added to the Amazon URL.

Following a marketplace link takes the visitor to Amazon.com, where Amazon’s own privacy notice and data practices apply.

Retention

Keep only what has a purpose.

Your choices and rights

Requests should be understandable.

Use the fixed “Privacy choices” button to allow or decline future analytics at any time. The first-party collector has no account or persistent visitor ID. Google Analytics uses pseudonymous cookie identifiers after permission, so identifying a person from analytics data alone may not be possible or reliable.

Depending on where you live and which law applies, you may also be able to request information about personal data, access a copy, correct it, ask for deletion or restriction, object to certain use, or complain to the responsible data protection authority.

Every optional marketing email provides an unsubscribe link. Withdrawal stops future marketing use; it does not affect delivery of a puzzle already requested. The site does not perform automated decision-making or behavioural profiling.

Security

Safeguards in the current build.

• Contact and puzzle details use POST and are not appended to the page URL; confirmation and unsubscribe tokens are stored only as hashes.
• Names, email addresses, custom words and message text are excluded from analytics events.
• Puzzle requests use same-site checks, anti-forgery tokens, address confirmation, per-session request limits and per-email delivery quotas.
• Personal-marked words are excluded from the candidate database and removed after delivery.
• The site does not claim successful delivery when email is unavailable.
• The Google Analytics script is loaded only after explicit permission; advertising consent states remain denied.

No website or transmission method can be promised as absolutely secure. Hosting, HTTPS, backups, database access controls and incident procedures must be reviewed as part of public deployment.

Children

An adult-focused book site.

The series and website are presented for adults and are not designed to build profiles about children. The site does not knowingly seek children’s personal data. If a parent or guardian believes a child submitted personal information, they may request review or deletion through the privacy contact route once delivery is connected.

Changes and contact

Update the notice when the site changes.

This page should be revised when a hosting or email provider, analytics tool, optional cookie, affiliate mechanism, account or checkout is added or changed. Material changes should receive a new effective date.

Questions about this notice can be submitted through the contact page. The visible delivery status there indicates whether a working recipient has been connected.