Privacy Policy

The short version

• The tools and the games work without an account. We do not ask who you are to use them.
• If you create an account, we store your name, your email address and what you make in the apps, so we can show it back to you.
• We use only the cookies the site needs to work. Our visitor statistics use no cookies.
• We do not sell your data, and we do not share it with advertisers.
• You can delete your account, and everything you made in the apps, at any time.

Using the tools

Many tools work out their results on our server, so what you type into them is sent with the request. We use it to calculate the answer and we do not save it. Some tools, such as the password generator, work entirely in your browser.

Playing the games

When you play without an account, we give your browser a random ID in a cookie called games_session_id. On our server we store your guesses, your results and your streaks under that ID, so the game remembers where you are. The ID does not say who you are. If you sign in later, we move your progress to your account.

When you play while signed in, the same information is stored with your account. If you delete your account, your past game results are kept without any link to you, as part of the puzzle statistics.

Your account

You need a free account for the web apps (Notepads also works without one). When you sign up, we store:

• your name and email address,
• your password, stored only as a secure hash that we cannot read,
• when you confirmed your email address,
• your dashboard preferences, and
• if you turn on two-factor authentication, its secret key and recovery codes, stored encrypted.

We use your email address to confirm it is yours, to send password reset links, and to send the messages you ask for in the apps. We do not send newsletters or marketing email. When a new account is created, the people who run the site get a short notice with its name and email address.

What you store in the apps

Each app stores what you put into it, linked to your account:

• Notepads: the title and text of each note. Without an account, a note is saved only in your browser’s local storage and never reaches our server. If you sign in, you can move it to your account.
• Habit Tracker: your habits, the days you complete them, and any values or notes you add. If you make your profile public, its display name, bio and the habits you mark as public, with their progress, can be seen by anyone with its link.
• Grocery Lists: your lists and their items, and who added or checked off each item. When you invite someone, we store their email address and send them an invitation that shows your name and the list’s name.
• Subscription Tracker: the subscriptions you enter, such as their name, price, currency, billing cycle and dates, and any notes or links.
• Countdown Timer: each countdown’s title, description, date and time zone. A published countdown can be seen by anyone with its link.
• Wedding Invites: the couple’s names, the date, venue, invitation text, photos you upload, meal options and your own questions for guests. A published invitation can be seen by anyone with its link.

We also keep a change log of what happens in the apps, such as a habit being created or a list item being checked off. It records the names of the things that changed, not the text of your notes, and helps us run and support the site.

If you reply to a wedding invitation

When you reply to an invitation, we store your name, whether you will attend, your email address if the couple asks for it, your meal choice, your plus-one’s name and meal choice, and your answers to the couple’s questions. The couple who made the invitation can see your reply, and by default they also get it by email. It stays until they delete the wedding or their account.

Cookies and browser storage

We use only cookies that the site needs to work. We do not use advertising or tracking cookies.

• great-online-apps-session keeps you signed in as you move between pages and protects forms. It expires after two hours without activity.
• XSRF-TOKEN protects you against forged requests from other websites. It has the same lifetime as the session cookie.
• remember_web_… is set only if you tick “Remember me” when you log in, and keeps you signed in for up to 400 days or until you log out.
• games_session_id is set on the games pages and links your game progress to your browser for one year.

Your browser’s local storage also keeps notes you write without an account and your light or dark display setting. This data stays on your device.

Visitor statistics

We count visits with Umami, a privacy-focused analytics tool that uses no cookies. It records the pages viewed, the site you came from, your browser, operating system, device type, screen size and language, and your approximate location, such as your country. It does not store your IP address, and we cannot use it to identify you.

Services that help us run the site

• Bunny Fonts (fonts.bunny.net) delivers the site’s fonts, so your browser connects to it and it receives your IP address. Bunny Fonts states that it does not log or track visitors.
• AhaSend delivers our email, such as sign-up confirmations, password resets, grocery list invitations and RSVP notices. It receives the recipient’s email address and the message.

Logs and security

Like most websites, our server records technical information to keep the site working and secure. Your session record on our server includes your IP address and browser type, and is removed after it expires. We use IP addresses for a short time to limit repeated login attempts and invitation replies. We also measure the site’s performance with a tool that runs on our own server; it records slow pages, errors and which accounts make the most requests, and keeps this for seven days.

Who can see your data

Only you can see what you store in the apps, except for what you choose to share: a grocery list is shared with the people you invite, and a public habit profile, a published countdown and a published wedding invitation can be seen by anyone with the link. The people who run the site can access stored data when they need to, to run, support and protect the service.

We do not sell your data, rent it or share it for advertising.

How long we keep it and how to delete it

We keep your account and what you store in the apps until you delete them. You can delete single items in each app, and you can delete your whole account in your profile settings. Deleting your account removes your account and everything you made in the apps, including your notes, habits, lists, subscriptions, countdowns, weddings and the replies to them. Game results are kept without a link to you, as described above. Entries in our change log are kept separately and are not removed with your account.

Your choices

You can see and change most of your data yourself, in your account settings and in each app. Depending on where you live, you may also have the right to ask for a copy of your data, to have it corrected or deleted, or to object to how we use it.

Changes to this policy

When we change this policy, we update the date at the top of this page. Our terms of use explain the rules for using the site.