Privacy policy

This page describes what the website's code does with information today.

Template: owner review required before publication

This is a good-faith template describing the software as shipped. It is not legal advice and has not been reviewed by a lawyer. The site owner must complete every highlighted field, confirm the statements about their hosting setup, and obtain qualified advice for the jurisdictions in which they operate. Status: Template v1: not yet reviewed by the site owner.

1. Who is responsible

Controller / operator: [OWNER TO COMPLETE: legal name of the person or organisation operating the site].
Contact for privacy questions: [OWNER TO COMPLETE: privacy contact email or postal address].

2. What this website's code does

No accounts. There is no sign-up, login or user profile.
Calculations stay in your browser. Card selections, seeds, simulation settings and results are processed locally. They are not sent to a server by this site's code and are not stored after you close or reload the page.
CSV downloads are created in your browser and saved to your device. Nothing is uploaded.
No cookies or browser storage are set by the site's own code, and there are no analytics, advertising, social-media or tracking scripts in the version this template describes.
Fonts are bundled with the site at build time rather than fetched from a third-party font service when you visit.
No forms collect personal data. Contact is by email only.

3. Hosting and server logs

Like all websites, the company that hosts this site receives your IP address and technical request details (browser type, pages requested, time) when your browser asks for a page, and may keep them in server logs for security and operations.

Hosting provider: [OWNER TO COMPLETE: name of host, the country where logs are processed, log retention period and the provider's privacy notice link]

Lawful basis (where required): [OWNER TO COMPLETE: for example legitimate interests in operating and securing the site. Confirm with an adviser.]

4. Email you send us

If you email the contact address, we receive your email address and message and use them only to reply and to improve the site. Retention period: [OWNER TO COMPLETE: how long correspondence is kept].

5. Children

The site is designed to be suitable for learners of all ages and collects no personal information. [OWNER TO COMPLETE: Confirm the age-related statements required in your jurisdiction (for example COPPA in the United States or the UK Children's Code) and whether this still holds if advertising or analytics are enabled.]

6. Your rights

Depending on where you live you may have rights to access, correct, delete or restrict the use of personal data we hold, to object to processing, and to complain to a data-protection authority. [OWNER TO COMPLETE: list the rights and the complaint authority relevant to your audience and your location, and how requests are handled and timed]

7. International transfers and security

[OWNER TO COMPLETE: describe where the hosting provider processes data and any transfer mechanism that applies]. The site is served over HTTPS when deployed on a platform that provides it. [OWNER TO COMPLETE: confirm HTTPS is enforced on the live domain]

8. Changes to this policy

Material changes will be described on this page and the review date updated. [OWNER TO COMPLETE: date of last review and who reviewed it]

9. If advertising or analytics are ever enabled

The statements in section 2 are true only while no third-party advertising or analytics are active. Before enabling either, this policy, the cookie / consent experience and the other pages must be updated. At minimum, the owner must review and update:

Section 2 (cookies, browser storage, third-party scripts) to remove the “no cookies, no tracking” statements.
A list of each third party that receives data, what data (for example IP address, device identifiers, cookie IDs, approximate location), why, and a link to its own privacy notice.
A statement that third-party vendors, including Google, use cookies or similar technologies to serve ads based on previous visits, and how users can opt out or manage personalised advertising. [OWNER TO COMPLETE: use wording and links currently required by Google and your consent platform]
The lawful basis (consent for non-essential cookies in the EEA, UK and Switzerland) and the consent management platform used, including how to withdraw consent at any time.
US state-law disclosures (for example notice of sale/sharing and opt-out rights) where applicable.
The Terms of Use, accessibility statement, children's section and server-log retention information.
Any analytics product, its settings (IP anonymisation, retention) and an opt-out.

The repository documents this process in docs/ADSENSE-READINESS.md and docs/DISCLOSURE-CHECKLIST.md. Advertising is not enabled on this site as shipped.

See also the Terms of use and the accessibility statement.