Privacy Policy

This Privacy Policy for Nathan Moore (doing business as PrintAWordSearch.com) ("we," "us," or "our" ), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://printawordsearch.com/ or any website of ours that links to this Privacy Policy
• Create or use an account on our website
• Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed.

If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at [email protected].

Summary Of Key Points

This summary provides key points from our Privacy Policy, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.

Do we process any sensitive personal information? Some of the information may be considered "special" or "sensitive" in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We do not process sensitive personal information.

Do we collect any information from third parties? We do not collect any information from third parties, except your email address from Google if you choose to sign in with Google, and, if you buy Pro, the state of your plan and its payments from Stripe.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information.

How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.

How do you exercise your rights? The easiest way to exercise your rights is by visiting https://printawordsearch.com/contact/, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect? Review the Privacy Policy in full.

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• names
• email addresses
• the description you choose for yourself on our forms (such as Educator or Parent)
• the messages you send us

Sensitive Information. We do not process sensitive information.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Newsletter sign-ups and messages

In Short: We keep what you send through our contact form, and your newsletter sign-up, until it has reached our inbox or our newsletter service, and for 90 days after.

Our newsletter is for account holders: you sign up from your account, as described under "Account information". We keep your email address, the description you choose ("Which describes you best?"), and the page you signed up on, and send them to MailerLite, which sends our newsletter, once your email address is confirmed.

When you send us a message through our contact form, we keep what you send: your name if you give it, your email address, your description, the reason you chose, your message, and the page you sent it from. We email it to ourselves through Postmark, so that we can reply to you. Sending a message doesn’t sign you up for our newsletter.

To stop the contact form being misused, we use your IP address, in a scrambled (hashed) form, to limit how many times it can be sent from one network. We also keep that scrambled form with your sign-up or message, for as long as we keep it, so we can hold back a flood of them from one network. We don’t keep the address itself. A sign-up or message we hold back as spam is never sent on, and is deleted 90 days after we hold it back.

To stop automated spam, our contact form also uses Cloudflare Turnstile, a check that you’re a person and not a bot. On the contact page, Turnstile collects information about your browser and connection, such as your IP address and your browser’s details, and sends it to Cloudflare, which uses it to tell people from bots and to improve that check. When you send a message, we ask Cloudflare whether your check passed, sending your IP address with it. We don’t keep what Turnstile collects. Cloudflare’s privacy policy for Turnstile, at cloudflare.com/turnstile-privacy-policy, explains how it handles this information.

Account information

In Short: If you create an account, we keep your email address, a scrambled form of your password, and your puzzle activity, so we can give you the account’s features.

Accounts are optional. You can print and play our puzzles without one. If you create an account, we collect and keep:

• Your email address, with when it was confirmed, when you last signed in, and the day you last used your account. We use it to identify your account, and to send you emails about your account: a link to confirm your address, links to set a password, a note when your password changes, and if your address isn’t confirmed, a reminder before your account would be deleted (see How Long Do We Keep Your Information?). We do not send you marketing emails because you have an account; our newsletter is separate, and you join it only if you sign up for it.
• Your password, if you set one. We store only a scrambled (hashed) form of it, which can’t be turned back into your password, us included.
• Your puzzle activity: your saved games (the words you have found, the time on the timer and the hints you used), each puzzle you finish with its time and the number of hints used, the puzzles you save for later, and your player settings, such as showing the timer.
• Which describes you best. Straight after you create an account, we ask which describes you best (Educator, Student, Mental Health Professional, Parent, Senior Care or Just for Fun). If you choose one, we keep it on your account, to help us make puzzles people enjoy. You can skip it, and change it in Account Settings.
• Your newsletter choice. If you ask for new word searches by email straight after you create an account, or in Account Settings, we note it on your account, and once your email address is confirmed (by the link we email you, or by signing in with Google), we send your email address and your description (Just for Fun if you didn’t choose one) to MailerLite, which sends our newsletter. Until then, nothing is sent: if your account is deleted before you confirm, MailerLite never hears of you. If your address is confirmed from a device that hasn’t signed in to the account before (by Google, or by setting a password from an emailed link), we don’t send a choice made before then, since we can’t tell it was yours; you can turn it on again in Account Settings. If you’re already on our newsletter and change your description, we update it at MailerLite too. We never add you to the newsletter unless you ask for it. Every hour we check with MailerLite, so your account shows it if you unsubscribe from a newsletter email. Turning it off in Account Settings unsubscribes you, and so does deleting your account once your email address is confirmed.
• Links we email you. We store only a scrambled (hashed) form of each link’s code. A link to set a password works once, for 60 minutes; a link to confirm your address works once, for 3 days.
• Session records. While you are signed in, we keep a record of your session, including your IP address and browser type, so that you stay signed in securely. It’s stored encrypted. If you leave "Keep me signed in" ticked, a cookie keeps you signed in on that device until you sign out there, and we keep a record of it: a scrambled copy of the cookie’s code, which no one can read, us included, with when it was made and the day it was last used.
• The browsers you sign in on. When you sign in, a cookie on that browser notes the accounts that have signed in on it, in a scrambled form that doesn’t hold their email addresses, for a year. If someone keeps guessing your password, we let only those browsers keep trying, so you can still sign in from your own.

We do not ask for your name, your date of birth or any other details to create an account. We ask you to confirm that you are 18 or older, and keep the date and time you did.

Signing in with Google. If you choose to sign in with Google, Google tells us your email address and confirms that it is verified. We do not ask Google for your name, photo, contacts or anything else, and we do not keep any other information from Google.

Games saved in your browser. Whether or not you have an account, the puzzle player saves your games in your browser’s local storage, on your device. We do not receive them unless you create or sign in to an account on that device. When you do, the games saved on that device are added to your account.

Word searches you make

In Short: If you make a word search with our generator while signed in, we keep what you typed and the puzzle made from it, so we can show it to you, print it, let you play it, and share it if you have Pro. Without an account, we don’t keep it: your browser holds it until you close the tab.

When you make a word search with an account, we keep its title, its words, the creator’s name if you add one, the choices you made for it (such as its letter case and whether it has an answer key), the puzzle grids made from them, whether you chose to share it online, and your IP address in a scrambled (hashed) form, so we can spot many puzzles made from one place. We don’t keep the address itself.

Without an account, we don’t keep the word search. We send it back to your browser sealed (encrypted, so it can’t be read or changed), and your browser keeps it only in the tab you made it in, so you can print it again, open it again if you reload the page, and save it to an account if you sign up or sign in from that tab. Closing the tab removes it. To stop the generator being misused, we count the puzzles made:

• from your browser, by a random ID that your browser keeps, used only in a scrambled (hashed) form, so we can tell when puzzles are being made faster than a person could.
• from your network, by your IP address in a scrambled form, so we can limit how many puzzles one network makes. We don’t keep the address itself.

These counts are kept for a minute, or an hour for a network’s hourly count, and then deleted.

Playing your own puzzles. With an account, you can play the puzzles you make online, on a page only you can see while signed in. Your game is saved in your browser, as other games are.

Shared puzzles. With Pro, you can share a puzzle to play online. Anyone with its link can play it and print it, including its title, its words and the creator’s name, until you stop sharing it, turn off Share Online or delete the puzzle, or Pro ends. A link that stopped when Pro ended, or that was shared from a free account before sharing became part of Pro, works again if the account gets Pro, unless the puzzle has been shared again with a new link since. Puzzles made without an account aren’t shared. Shared puzzles are not listed anywhere on our website and are marked so that search engines don’t show them. Please use first names only in a puzzle you share, and leave out other personal details such as addresses or phone numbers. The generator reminds you of this where you turn on sharing, by the link once it’s made, and when you copy a link from My Puzzles.

Checking for misuse. Titles, words and creator names are checked for offensive language before a puzzle is made. We can look at any puzzle saved to an account, and remove one that breaks our Terms of Service.

The daily word search

In Short: Without an account, your daily puzzles stay on your device. With one, we keep how each day went, so we can count your streak.

Without an account, the daily word search keeps your game and your result in your browser’s local storage, on your device, so you can come back to it the same day and see your result. We do not receive them.

With an account, we keep, for each day you play: the game as you left it, whether you solved it or revealed the answers, your time, the hints you used, how many words you found, whether you played it on its own day or from the archive, and your device’s time zone, which we use to work out your "today" for your streak. If you finish a day’s puzzle and then sign in or create an account on that device the same day, that day’s result is added to your account.

The result you copy to share contains the puzzle’s number, your time and your hints, and our address. It goes wherever you paste it; we don’t see it.

Theme Seek

In Short: Theme Seek is our second daily puzzle, and we keep its games as we keep the daily word search’s. Because it doesn’t show its words, your browser asks our server for a hint or the answers.

Theme Seek keeps your game and your result as the daily word search does: without an account, in your browser’s local storage, on your device, where we do not receive them; with an account, the same details for each day you play, kept apart from your daily word search games, with a streak of its own.

When you use a hint or reveal the answers, your browser asks our server for them. A hint’s request includes the words you have found so far, so the hint points to one you haven’t. Without an account, we don’t keep these requests. With an account, a hint or the answers you ask for count in that day’s game, as if you had used the button. To stop these requests being misused, we count them from your network for a minute, by your IP address in a scrambled (hashed) form. We don’t keep the address itself.

The result you copy to share contains the puzzle’s number, your time and your hints, and our address, never the theme or a word.

Paying for Pro

In Short: If you buy Pro, Stripe takes the payment. We never see or keep your card details.

Pro is paid through Stripe, our payment provider. When you buy Pro, Stripe receives your account’s email address and a reference number for your account, the plan you chose, and the card or other payment details you enter. You give those details to Stripe directly, on a form it provides on our page; they never pass through or stay on our servers. Stripe also receives information about your device and connection when you pay, such as your IP address and browser, which it uses to keep payments safe and prevent fraud. Stripe sends your receipts and reminders before a yearly plan renews, and keeps your invoices, which you can see from Account Settings while you have a plan.

We keep a reference to your customer record at Stripe, your plan (monthly or yearly), its state (for example active, canceled, or waiting on a payment that didn’t go through), and when it renews or ends. We use them to give you Pro, to show your plan in Account Settings, and to email you about it: when Pro starts, when a payment doesn’t go through, when you cancel, and when Pro ends. We don’t keep your card number. Stripe’s privacy policy, at stripe.com/privacy, explains how it handles your information.

Information automatically collected

In Short: Some information, such as your Internet Protocol (IP) address and/or browser and device characteristics, is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Policy: https://printawordsearch.com/cookie-policy/.

The information we collect includes:

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps" ), and hardware settings).
• Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
• Location Data. We collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process the personal information for the following purposes listed below. We may also process your information for other purposes only with your prior explicit consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To send you our newsletter. If you sign up from your account, we process your email address and description to send you new word searches and updates. You can unsubscribe at any time from any newsletter email, or in Account Settings.
• To respond to your messages. We process what you send through our contact form to read and reply to it.
• To protect our contact form from misuse. We process a scrambled form of your IP address to limit how often it can be sent from one network, and use Cloudflare Turnstile to check that a message comes from a person, not a bot.
• To create and manage your account, and let you sign in. We process your email address and password to identify your account and let you sign in, and your email address to confirm it’s yours and to help you set a password.
• To provide your account’s features. We process your puzzle activity to keep your progress on every device you sign in on, show your best times, solve counts and progress through each category, and keep the puzzles you save for later.
• To keep accounts secure. We process IP addresses, email addresses and sign-in attempts to limit repeated attempts and prevent misuse.
• To make, show, print and share your word searches. We process the titles and words you type to make your puzzles, and to give you and anyone you share them with a way to play and print them.
• To limit and check the generator. We process scrambled forms of your browser’s ID and your IP address to stop the generator being misused, and we check what you type for offensive language.
• To take payment for Pro and manage your plan. We share your email address and your plan with Stripe to take payments, to renew, switch or cancel your plan when you ask, and to email you about your plan.
• To keep your daily word search and Theme Seek results and streaks. We process your daily games, results and time zone to show your results, count your streaks and keep each day to one try, and for Theme Seek, the words you have found so far, to give you a hint.
• To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time. For more information, see What Are Your Privacy Rights? below.
• To show ads. On pages with ads, Google AdSense processes information about your device and your visit to show ads, which may be personalized to your interests where the law allows or you agree, to measure them and to prevent fraud. Pro accounts don’t see ads. Learn more in Advertising below, and in our Cookie Policy: https://printawordsearch.com/cookie-policy/.
• To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.
• To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.

3. What Legal Bases Do We Rely On To Process Your Information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent. The cookies and similar technologies used for ads rely on your consent, which Google’s consent message asks for (see Advertising).
• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services, such as your account and its features, or at your request before entering into a contract with you.
• Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
  • Send users information about special offers and discounts on our products and services
  • Show ads, measure them and protect them from fraud (personalized ads only with your consent)
  • Analyze how our Services are used so we can improve them to engage and retain users
  • Keep accounts and the Services secure, including by limiting repeated sign-in attempts and checking that messages through our contact form come from people, not bots
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
• If the collection is solely for journalistic, artistic, or literary purposes
• If the information is publicly available and is specified by the regulations
• We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments

4. When And With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents ("third parties") who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will also not share your personal information with any organization apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct.

The third parties we may share personal information with are as follows:

• Advertising: Google AdSense, and the ad companies Google works with (on pages with ads, for visitors without Pro; see Advertising)
• Communicate and Chat with Users: MailerLite
• Web and Mobile Analytics: Umami Analytics
• Email Delivery: Postmark (emails about your account, the messages you send through our contact form, and other emails about the Services)
• Sign-in: Google (only if you choose to sign in with Google)
• Payments: Stripe (your email address, a reference number for your account, your plan and the payment details you enter, to take payments, send receipts and prevent fraud; only if you buy Pro)
• Spam Protection: Cloudflare Turnstile (on the contact page, to check that a message comes from a person, not a bot)
• Website Hosting: DigitalOcean (our server) and Cloudflare (our network, and the backup copies of our website, kept in Cloudflare R2)

We also may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

5. What Is Our Stance On Third-Party Websites?

In Short: We are not responsible for the safety of any information that you share with third parties that we may link to or who advertise on our Services, but are not affiliated with, our Services.

The Services may link to third-party websites, online services, or mobile applications and/or contain advertisements from third parties that are not affiliated with us and which may link to other websites, services, or applications. Accordingly, we do not make any guarantee regarding any such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites, services, or applications. The inclusion of a link towards a third-party website, service, or application does not imply an endorsement by us. We cannot guarantee the safety and privacy of data you provide to any third-party websites. Any data collected by third parties is not covered by this Privacy Policy. We are not responsible for the content or privacy and security practices and policies of any third parties, including other websites, services, or applications that may be linked to or from the Services. You should review the policies of such third parties and contact them directly to respond to your questions.

6. Do We Use Cookies And Other Tracking Technologies?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

If you create an account and sign in, we use cookies that are strictly necessary for your account: they keep you signed in, protect our forms from forgery, and tell our pages that you have signed in on this browser. They are not used for advertising or analytics. Without an account, our pages do not set these cookies. Our Cookie Policy lists them.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences). The third parties and service providers use their technology to provide advertising about products and services tailored to your interests which may appear either on our Services or on other websites.

To the extent these online tracking technologies are deemed to be a "sale"/"sharing" (which includes targeted advertising, as defined under the applicable laws) under applicable US state laws, you can opt out of these online tracking technologies by submitting a request as described below under section Do United States Residents Have Specific Privacy Rights?

Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy: https://printawordsearch.com/cookie-policy/.

Advertising

In Short: Some of our pages show ads from Google AdSense, which uses cookies to choose and measure them. Pro accounts don’t see ads.

We show ads from Google AdSense on the home page, puzzle and category pages, All Word Searches, the daily word search, Theme Seek and the word search generator. The pages for signing in, your account and paying for Pro, our policies and a puzzle shared from the generator don’t show ads, and our printable PDFs have none. Pro accounts don’t see ads: while you’re signed in with Pro, our pages don’t load Google’s ad code at all.

On pages with ads, Google receives information about your device and your visit, such as your IP address, your browser, the page you’re on and its cookies, to show ads, measure them and prevent fraud. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and other sites on the internet. The cookies of other ad companies that Google works with may also be used to show ads here. Google explains what it does with this information in How Google uses information from sites or apps that use our services.

You can opt out of personalized advertising from Google in Google's Ads Settings, and from many other ad companies at aboutads.info or, in Europe, youronlinechoices.eu.

If you are in the European Economic Area, the UK or Switzerland, Google’s consent message asks you before cookies or similar technologies are used for ads, and you choose which uses to allow. You can change your choice at any time with the privacy and cookie settings link the message adds to pages with ads. Our Cookie Policy lists the cookies used for ads.

7. Is Your Information Transferred Internationally?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the United States. Regardless of your location, please be aware that your information may be transferred to, stored by, and processed by us in our facilities and in the facilities of the third parties with whom we may share your personal information (see When And With Whom Do We Share Your Personal Information? above), including facilities in the United States, and other countries.

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this Privacy Policy and applicable law.

European Commission's Standard Contractual Clauses:

We have implemented measures to protect your personal information, including by using the European Commission's Standard Contractual Clauses for transfers of personal information between our group companies and between us and our third-party providers. These clauses require all recipients to protect all personal information that they process originating from the EEA or UK in accordance with European data protection laws and regulations. Our Standard Contractual Clauses can be provided upon request. We have implemented similar appropriate safeguards with our third-party service providers and partners and further details can be provided upon request.

8. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

Your daily word search and Theme Seek results are kept as long as your account, and deleted with it. Without an account, they stay in your browser until you clear it.

A word search made without an account isn’t kept: it stays only in the browser tab you made it in, and goes when you close the tab. The counts we use to stop misuse are deleted after a minute, or an hour for a network’s hourly count. A word search saved to an account is kept until you delete it, or your account. When a puzzle is deleted or taken down, its files go at once, and its record within a week. Printable files are rebuilt when they’re asked for, so we don’t keep them for long.

Your plan’s details are kept as long as your account. If you delete your account, your plan is canceled at once, and your customer record at Stripe, with any saved payment details, is deleted. Our Terms of Service explain refunds. Stripe keeps records of past payments and invoices for as long as the law requires.

A newsletter sign-up or a contact message is deleted from our website 90 days after it has reached MailerLite or our inbox. One we hold back as spam is never sent on, and is deleted 90 days after we hold it back. MailerLite keeps your subscription until you unsubscribe, and we keep the messages we receive in our email for as long as we need them to help you.

We keep your account information for as long as you have an account. You can delete your account at any time in Account Settings. That deletes your email address, saved games, finished puzzles and times, saved puzzles, the word searches you’ve made and settings straight away, and signs you out on every device. Emailed links are deleted within a day of expiring, and session records end when the session does. A "Keep me signed in" record is deleted when you sign out on its device, or after 400 days without use. An account whose email address is never confirmed, and that has never had Pro, is deleted after 30 days without use, with everything in it; we email the address a week before, so its owner can keep it by confirming. Copies may remain in our backups until those backups are deleted. Our backups are kept for up to about a year: one for each of the last 14 days, 8 weeks and 12 months. A backup we make by hand on our server is deleted after 30 days. Games saved in your browser stay on your device until you clear them.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

9. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

When something goes wrong on our website, we receive an error report so we can fix it. We take email addresses, IP addresses, passwords, the links we email you and anything you typed out of these reports, and out of our website’s log, before they are sent or stored. The log can say which account was signed in when something went wrong (by its number, not its email address), and is kept for 14 days. An email to you that fails to send is kept for a week, so we can look into it, with the address it was going to. Our web server doesn’t keep a log of the pages visited or who visited them. Postmark, which sends our emails, keeps a copy of each one for a limited time, then deletes it.

10. Do We Collect Information From Minors?

In Short: Accounts are for adults. Children can print and play our puzzles without an account, and we do not knowingly collect personal information from children.

You must be at least 18 years of age, or the equivalent age of majority as specified by law in your jurisdiction, to create an account. Children are welcome to print and play our puzzles without an account, and we do not knowingly collect, solicit data from, or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction, nor do we knowingly sell personal information. By creating an account, you represent that you are at least 18 or the equivalent age as specified by law in your jurisdiction: we ask you to confirm that you are 18 or older before we create it, and keep the date and time you did. If we learn that an account has been created by someone under that age, we will delete the account and its information. If you become aware that a child has created an account, please contact us at [email protected].

11. What Are Your Privacy Rights?

In Short: Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. If a decision that produces legal or similarly significant effects is made solely by automated means, we will inform you, explain the main factors, and offer a simple way to request human review. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us by using the contact details provided in the section How Can You Contact Us About This Notice? below.

We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section How Can You Contact Us About This Notice? below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us using the details provided in the section How Can You Contact Us About This Notice? below. You will then be removed from the marketing lists. However, we may still communicate with you, for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

Account information: If you would at any time like to review your account information or delete your account, you can sign in and go to Account Settings and My Puzzles. They show your saved puzzles, games and solves, and Account Settings has a Delete my account link, to the page that deletes your account and its information straight away. To ask for a copy of your account information, contact us.

Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services. You may also opt out of interest-based advertising by advertisers on our Services. For further information, please see our Cookie Policy: https://printawordsearch.com/cookie-policy/.

If you have questions or comments about your privacy rights, you may email us at [email protected].

12. Controls For Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.

California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

13. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. More information is provided below.

Categories of Personal Information We Collect

The table below shows the categories of personal information we have collected in the past twelve (12) months. The table includes illustrative examples of each category and does not reflect the personal information we collect from you. For a comprehensive inventory of all personal information we process, please refer to the section "What Information Do We Collect?"

Category	Examples	Collected
A. Identifiers	Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name	YES
B. Personal information as defined in the California Customer Records statute	Name, contact information, education, employment, employment history, and financial information	YES
C. Protected classification characteristics under state or federal law	Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data	NO
D. Commercial information	Transaction information, purchase history, financial details, and payment information	NO
E. Biometric information	Fingerprints and voiceprints	NO
F. Internet or other similar network activity	Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements	YES
G. Geolocation data	Device location	NO
H. Audio, electronic, sensory, or similar information	Images and audio, video or call recordings created in connection with our business activities	NO
I. Professional or employment-related information	Business contact details in order to provide you our services at a business level or job title, work history, and professional qualifications if you apply for a job with us	NO
J. Education Information	Student records and directory information	NO
K. Inferences drawn from collected personal information	Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual's preferences and characteristics	NO
L. Sensitive personal information	Social security numbers, financial account details, precise geolocation, racial or ethnic origin, and health information	NO

We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of:

• Receiving help through our customer support channels;
• Participation in customer surveys or contests; and
• Facilitation in the delivery of our Services and to respond to your inquiries.

We will use and retain the collected personal information as needed to provide the Services or for:

• Category A - As long as the user has an account with us
• Category B - As long as the user has an account with us
• Category F - As long as the user has an account with us

Sources of Personal Information

Learn more about the sources of personal information we collect in "What Information Do We Collect?"

How We Use and Share Personal Information

Learn more about how we use your personal information in the section, "How Do We Process Your Information?"

We collect and share your personal information through:

• Targeting cookies/Marketing cookies

Will your information be shared with anyone else?

We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information in the section, When And With Whom Do We Share Your Personal Information?

We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information.

On pages with ads, Google AdSense and the ad companies it works with may use information from your visits, such as cookies and your IP address, for personalized advertising, which some US state laws count as "selling" or "sharing" personal information. You can opt out as described in Advertising. We have disclosed the following categories of personal information to third parties for a business or commercial purpose in the preceding twelve (12) months:

• Category F. Internet or other electronic network activity information

The categories of third parties to whom we disclosed personal information for a business or commercial purpose can be found under When And With Whom Do We Share Your Personal Information?

Your Rights

You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California’s privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")

Depending upon the state where you live, you may also have the following rights:

• Right to access the categories of personal data being processed (as permitted by applicable law, including the privacy law in Minnesota)
• Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in California, Delaware, and Maryland)
• Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in Minnesota and Oregon)
• Right to obtain a list of third parties to which we have sold personal data (as permitted by applicable law, including the privacy law in Connecticut)
• Right to review, understand, question, and depending on where you live, correct how personal data has been profiled (as permitted by applicable law, including the privacy law in Connecticut and Minnesota)
• Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including the privacy law in California)
• Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including the privacy law in Florida)

How to Exercise Your Rights

To exercise these rights, you can contact us by visiting https://printawordsearch.com/contact/ or by emailing us at [email protected].

Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.

Request Verification

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes. If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request and the agent will need to provide a written and signed permission from you to submit such request on your behalf.

Appeals

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at [email protected]. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine The Light" Law

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us by using the contact details provided in the section "How Can You Contact Us About This Notice?"

14. Do We Make Updates To This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Policy. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

15. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at [email protected] or contact us by post at:

Nathan Moore
14 Pleasant St
Westford, MA 01886
United States

16. How Can You Review, Update, Or Delete The Data We Collect From You?

If you have an account, Account Settings shows what we keep, and you can delete your account there at any time.

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please visit: https://printawordsearch.com/contact/.