Privacy

Last updated: 16 June 2026

This privacy policy explains how personal data is handled when you use Josh-Fun (https://josh-fun.co.uk/).

1) Who we are (data controller)

Josh-Fun ("we", "us") is operated by Josh (the site owner; an individual, not a company). For UK data protection law purposes, Josh is the data controller for personal data processed via this website.

Contact email (privacy enquiries and rights requests): info@josh-fun.co.uk

We do not publish a postal address because this is a personal project. We aim to handle privacy enquiries by email.

We are not required to appoint a data protection officer and do not currently have one.

2) What this policy covers

This policy explains what personal data may be processed when you use the site, why it is processed, the lawful bases we rely on, how long data is kept, and the rights available to you.

3) The site's features and what we do not offer

Josh-Fun is primarily static pages plus simple games/tools that run in your browser. At the time of writing, we do not provide:

• user accounts or logins for general visitors;
• comments or public user submissions;
• purchases or payments;
• newsletters;
• a public contact form (email contact only).

4) Personal data we may process

Even if you do not actively provide information to us, some limited personal data is commonly processed to operate a website (for example, server logs). We may process:

A. Technical and log data (automatic)

• IP address;
• date and time of your request;
• pages requested (URLs);
• browser and device details (user agent);
• referrer information (sometimes);
• error and security event logs.

B. Data you choose to provide

If you email us, we process your email address and the contents of your message (and our replies).

5) Why we process personal data and our lawful bases

UK GDPR requires a lawful basis for each purpose of processing. We rely on the following:

A. Operating, securing and improving the website

• Purpose: to deliver pages to your device, monitor performance, prevent abuse, investigate faults, and keep the site secure.
• Personal data: technical/log data described in section 4A.
• Lawful basis: legitimate interests (running and protecting a website).

B. Responding to emails and privacy requests

• Purpose: to respond to your email and handle requests (including data protection rights requests).
• Personal data: contact details and message contents.
• Lawful basis: legitimate interests (communications) and, where applicable, legal obligation (compliance with data protection law).

C. Automated decision-making

We do not carry out automated decision-making or profiling about visitors.

6) Analytics (Google Analytics 4)

We use Google Analytics 4 (GA4) to understand how people use Josh-Fun. This helps us see which games and tools are popular, where visitors come from, and how long people spend on the site — so we can improve it over time.

Analytics only runs if you agree to it. When you first visit, a cookie banner asks for your consent. No analytics cookies are set and no usage data is collected unless you click "Accept". If you click "Reject" (or ignore the banner), Google Analytics stays switched off. You can change your choice at any time using the Cookie settings link below.

When enabled, Google Analytics automatically collects:

• pages you visit and how long you spend on them;
• how far down a page you scroll;
• whether you click links that leave the site;
• your approximate country and city (not your exact location);
• your device type, browser, and operating system;
• how you found the site (e.g. Google search, direct link, social media).

Google Analytics uses cookies and similar technologies to collect this data. The data is sent to Google and processed on their servers. Google acts as a data processor on our behalf. For more information, see Google's Privacy Policy.

We do not use Google Analytics to collect personally identifiable information such as your name or email address, and we have not enabled any advertising features or remarketing.

Opting out: the simplest way to opt out is to click "Reject" on the cookie banner, or open Cookie settings to change a previous choice. You can also install the Google Analytics opt-out browser add-on to prevent your data being used by Google Analytics across all sites, or use a content/ad blocker to block the GA script.

7) Cookies and similar technologies

Cookies are small text files stored on your device. "Similar technologies" include localStorage/sessionStorage and other methods that store or access information on your device.

Analytics cookies (Google Analytics)

Google Analytics sets cookies (such as _ga and _ga_XXXXXXXXXX) to distinguish visitors and track sessions. These cookies typically expire after 2 years. They do not contain personally identifiable information.

Game/tool storage (localStorage)

Some games and tools may store progress or preferences in your browser using localStorage (for example, to keep a save file). You can clear this via your browser settings (often under "Site data" or "Cookies and site data"), but doing so may erase game saves.

Theme preference (localStorage)

If you switch between light and dark mode, your preference is saved in localStorage so the site remembers it on return visits. No personal data is involved — it only stores the word "dark" or nothing at all.

Your choices

You can control cookies and site storage through your browser settings, including deleting site data or blocking storage. You can also use browser extensions/content blockers to block analytics scripts. Note that blocking site storage may affect how some games/tools function (for example, erasing game saves or forgetting your theme preference).

8) Games and tools (local processing)

Unless a specific page clearly states otherwise, inputs you type into games/tools are processed locally in your browser and are not sent to us. If a tool needs to send data to a server in future (for example, to fetch results), the page will explain what is sent, why, and to whom.

SpellSnap (anonymous daily statistics)

SpellSnap is the one current exception. So it can show "how everyone did today", at the end of a daily puzzle your browser sends us anonymous, aggregate results only — for each word, whether it was solved and how many attempts it took. No account, no name, and none of the words you typed are sent. To stop the same puzzle being counted twice, our server briefly uses a one-way (hashed) form of your IP address to recognise a repeat submission; it is not used to identify you and is not linked to any other data. The lawful basis is our legitimate interest in showing fair community statistics.

9) Sharing personal data

We do not sell personal data. We do not share personal data for advertising or profiling.

We may share limited personal data with service providers that help us operate the site (for example, hosting, security, or backup providers). Where required, these providers act on our instructions and are expected to protect the data appropriately.

10) International transfers

If any service providers process personal data outside the UK, we will ensure appropriate safeguards are used (such as adequacy regulations or appropriate contractual protections) and we will update this policy with relevant details.

11) How long we keep personal data

We keep personal data only for as long as necessary for the purposes described in this policy.

• Server logs: kept for a limited period for security and maintenance, then deleted or anonymised unless needed longer to investigate incidents.
• Email correspondence: kept for as long as needed to respond and keep an appropriate record, then deleted.

12) Security

We use reasonable technical and organisational measures to protect the site and any personal data processed, including access controls and security monitoring. No method of transmission or storage is completely secure, but we work to reduce risks.

13) Your rights

Under UK GDPR, you may have the right to:

• be informed about how your personal data is used;
• request access to personal data (a "subject access request");
• request rectification (correction) of inaccurate data;
• request erasure in some circumstances;
• request restriction of processing in some circumstances;
• object to processing where we rely on legitimate interests;
• data portability (in limited circumstances); and
• withdraw consent at any time (where we rely on consent).

How to exercise your rights: email info@josh-fun.co.uk. To help us locate relevant information (especially for log-related requests), please include approximate dates/times and the pages you visited. We may ask for reasonable information to confirm your identity.

We normally respond within one month. If a request is complex, we may extend this timeframe (and will tell you if we do).

14) Complaints

If you have concerns about how we handle personal data, please contact us first and we will try to resolve the issue. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO).

ICO website: ico.org.uk

15) Children's privacy

Josh-Fun is an entertainment website and may be used by a wide audience. We do not intentionally collect personal data from children. If you believe a child has provided personal data to us (for example, by emailing us), please contact us and we will take appropriate steps to delete it where possible.

16) Links to other websites

This site may link to other websites or services (including administrative panels on subdomains). Those services have their own privacy policies and practices. We are not responsible for their content or privacy handling.

17) Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will change when updates are made.