Privacy Policy
Information we collect
Contact form. Name, email address, subject, message, and the IP address the submission came from.
Accounts. If you create an account, we store the account identifier, email address, name, and profile image supplied by the sign-in provider you use. Local classroom accounts may store less or pseudo-anonymized data such as a 3-character 'initials' type username and a nickname for the teacher, in place of actual identifiers.
Optional features may require entry and retention of birthday, toward satisfying age requirements.
Game and application data. We store data generated while you use the games and tools on this site. This includes saved configurations, progress, scores, history of past play, and preferences. This data is associated with your account.
Server logs. Our host records IP address, timestamp, requested URL, HTTP status, and browser identification for each request.
Games and tools that do not require an account can be used without providing any of the above beyond server logs.
How we use it
Contact form submissions are delivered to a GateIron mailbox and used to reply. The name, email address, and IP address submitted are included in that email.
Account information is used to identify you across sessions and devices and to display your profile.
Game and application data is used to provide the features that depend on it, such as restoring saved work, showing past results, and personalising what a game presents to you. Some data are used to prevent scoring exploits.
We may also review this data to understand how the games and tools are used and to improve them.
Server logs are used for operation, diagnostics, and abuse investigation.
We reply to messages you send us. We do not operate a mailing list. Accepting unsolicited email from us is opt-in via a setting on your preferences page. As of this date, we have never sent such an email, and we have no plans to. But if you opt in, we may contact you by email if a need arises.
Disclosure
We do not share personal information for advertising or marketing, and we do not sell it.
Information is disclosed only to the service providers listed below, to the extent required for them to operate, and where required by law.
Third-party services
- Hostinger — web hosting, email, database, and content delivery. Handles all data stored by this site.
- Cloudflare Turnstile — receives IP address and browser characteristics as needed to validate human vs. automated site use.
- Google Sign-In — used for account creation and login where offered. Google supplies the account identifier, email address, name, and profile image. Passwords are handled by Google and are never received or stored by this site.
Links to Etsy and Printables are external. Those companies' policies apply once you follow them.
Cookies and local storage
Signed-in sessions use a session cookie. It is required for the account to function.
The contact form saves an unsent draft in your browser's local storage and removes it when the message is sent. Games and tools may store settings and in-progress state in local storage.
Cloudflare Turnstile sets its own storage on pages where it appears.
We do not use advertising cookies or third-party analytics.
Retention
Contact form email is retained as ordinary business correspondence. Account and game data are retained until the account is deleted, with exceptions listed below. Server logs are retained on our host's schedule.
Access and deletion
Accounts can be deleted. Deleting an account removes the account record and the game and application data associated with it, with the following exceptions:
- Game result data used in computation of multi-game 'streak' scores is retained to prevent use of account remaking to unfairly achieve higher scores.
- User feedback about features, words, gameplay or other, is retained independently of user accounts and is not deleted during account deletion.
Contact form email is ordinary correspondence and is handled as such.
Where data protection law grants you rights over your personal information — including the UK GDPR and the EU General Data Protection Regulation, which apply to residents of the United Kingdom and the European Economic Area — those rights apply and requests can be made through the contact form.
Children
We do not knowingly collect personal information from children under 13. Standard accounts require a third-party sign-in provider and are subject to that provider's minimum age requirements, which is 13 for all of the providers we use.
Local Classroom accounts are a type of limited, classroom use only account that allows teachers to grant access to educational features here for students younger than 13, without students entering personally identifiable information (PII). This is managed by the classroom teacher, and we discourage and block the entry of PII by use of descriptive text and short field lengths that won't hold most full names or email addresses.
If you believe a child has provided personal information, contact us and it will be deleted.
Changes
This policy is updated when what we collect or how we use it changes. The effective date above is revised at the same time.
Contact
GateIron, LLC, Oregon, United States. Use the contact form.