← Back to game

Privacy Policy

Last updated: April 2026

CLUEFOLD is a free daily deduction game. This policy explains what data is collected when you play, why it is collected, and your rights under the UK GDPR and EU GDPR.

1. What data is collected and why?

Data	Source	Purpose	Legal basis
IP address, browser/device type, pages visited, time on site	Google Analytics 4 (GA4)	Understanding how many people play and how the game performs	Consent
Ad interaction data, inferred interests	Google AdSense	Displaying advertising to help fund the game	Consent (personalised ads) / Legitimate interest (non-personalised contextual ads)
Game progress (current clue, score, guesses)	Your browser's localStorage	Saving your daily progress so you can return mid-game	Strictly necessary — no consent required
Daily streak count	Your browser's localStorage	Tracking your consecutive days of play	Strictly necessary — no consent required
Cookie consent preference	Your browser's localStorage	Remembering your accept/decline choice so the banner is not shown on every visit	Strictly necessary — no consent required

If you decline cookies, GA4 is not loaded and you may still see a generic, non-personalised ad — AdSense runs in contextual-only mode and no user-targeting cookies are set by Google.

2. Cookies and localStorage

CLUEFOLD does not set any cookies itself. Game state is stored in your browser's localStorage, which is never transmitted to any server.

When you accept cookies, Google AdSense and GA4 may set their own cookies. For details on what Google sets, see Google's cookie policy.

3. Third-party services

• Google Analytics 4 — only loaded after consent. Data is processed by Google LLC in the USA under the EU–US Data Privacy Framework. Retention is set to 14 months.
• Google AdSense — loaded for all visitors. Without consent, ads are non-personalised and Google does not set targeting cookies. With consent, personalised ads may be shown. See Google's privacy policy.
• Google Fonts — Inter and Playfair Display are loaded from Google's servers. This sends your IP address to Google as part of the font request, regardless of consent choice.

4. Data sharing

CLUEFOLD does not sell, rent, or share your data with any third parties beyond the Google services listed above, which are necessary to operate the site.

5. Data retention

• localStorage data (game progress, streak, consent preference) — stored in your browser until you clear your browser data. It is never sent to or stored on any server.
• GA4 analytics data — retained for 14 months, then automatically deleted by Google.
• AdSense data — governed by Google's own retention policies.

6. Your rights

Under UK GDPR and EU GDPR you have the right to:

• Withdraw consent at any time — use the "Cookie preferences" link at the bottom of the game page.
• Access data held about you.
• Erasure ("right to be forgotten") of your personal data.
• Object to processing based on legitimate interest.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Because CLUEFOLD does not hold identifiable personal data server-side, most requests can be fulfilled by clearing your browser's localStorage and declining cookies. For GA4 or AdSense data held by Google, requests should be directed to Google via their privacy tools.

7. Children

CLUEFOLD is a general-audience game. It is not directed at children under 13, and we do not knowingly collect data from children.

8. Changes to this policy

If this policy changes materially, the "last updated" date at the top of this page will be revised. Continued use of the site after any changes constitutes acceptance of the updated policy.