Skip to content

Privacy

What personal data Josh-Fun uses, why, and your rights.

Last updated: 7 November 2026

1) Who is responsible

Josh-Fun (josh-fun.co.uk) is run by Joshua Horton, an individual. He is the data controller for personal data processed through this website. Contact: info@josh-fun.co.uk.

2) What we collect, why, and for how long

There are no accounts and you never have to give us any personal details. If you reject analytics or block browser storage, the games and tools still work.

Visiting the site (server logs)

  • What: your IP address, browser and device details, the pages requested, the time and the referring page.
  • Why: to deliver pages to you and keep the site secure and working.
  • Lawful basis: legitimate interests (running and protecting a website).
  • How long: kept by our hosting provider for a limited period for security and fault-finding, then deleted.

Analytics (only if you press "Accept")

  • What: Google Analytics 4 records the pages you visit, how you use them (including starting or finishing a game and using share buttons), your approximate location (country and city), your device and browser, and how you found the site. We don't send anything you type, and page addresses are sent without query strings.
  • Why: to see which games and tools are used so we can improve them. No advertising features are switched on.
  • Lawful basis: your consent. Nothing is collected and Google Analytics doesn't load until you press "Accept". You can withdraw at any time in Cookie settings, which also deletes the analytics cookies.
  • How long: Google keeps analytics data for up to 14 months.

Daily scores and rankings

  • What: when you finish SpellSnap, Can You Beat Josh?, Guess the Number, Guess the Movie or Blink, your browser sends the game, the date and your score (for SpellSnap, also whether each word was solved and in how many tries), plus a random code that changes every day. To stop scores being counted twice, our server keeps a scrambled (hashed) form of that code and of your IP address (for IPv6, your network's address prefix).
  • Why: to show where you rank and how everyone did today, and to stop duplicate or abusive scores.
  • Lawful basis: legitimate interests (running fair rankings and statistics).
  • How long: the hashed code and IP are deleted once that day's scores can no longer be sent: within two days of the day ending for the rankings, and within three days for SpellSnap's statistics. The hashed IP used to limit how often scores can be sent is deleted within an hour. We keep only anonymous totals (how many players got each score), which are not personal data.

Username Checker

  • What: when you press "Check username", your browser sends the username you typed to our server. Our server then asks 26 sites (listed on the tool's page) whether a public profile with that name exists. Those sites see a request from our server, not from you, and never receive your IP address. To stop the tool being overused, our server keeps a one-way, salted code made from your IP address, with the times of your checks.
  • Why: to tell you whether the username is free, and to limit how many checks one connection can make.
  • Lawful basis: legitimate interests (providing the tool you asked to use, and protecting it from abuse).
  • How long: the username isn't stored at all. The hashed IP and check times are deleted within an hour, and the code can't be linked across days.

Emails

  • What: your email address and what you write, if you email us.
  • Why: to reply and to handle privacy requests.
  • Lawful basis: legitimate interests, or legal obligation for data protection requests.
  • How long: as long as needed to deal with your message, then deleted.

3) Cookies and browser storage

Only with your consent: the Google Analytics cookies _ga and _ga_8PWF1522N8, which tell visits apart and last up to 2 years.

Needed for the site to work (no consent needed): these are kept only in your browser.

  • jf-cookie-consent: your cookie choice, so we can respect it.
  • jf-theme: light or dark mode, if you choose it.
  • jf-library-v1: the games and tools you save, open recently, how often you open each one and the day you last finished it, which we use for suggestions (below).
  • Game and tool saves, such as scores, streaks and progress (for example spellsnap-stats-v2, jf-movie-v1, jf-blink-v1, crypto-empire-v2), and jf-rank-v1, which holds the daily code and your past ranks. crypto-empire-tab notes which tab is playing Crypto Empire, so two tabs can't overwrite each other.

You can delete all of these by clearing this site's data in your browser settings, though that will erase game progress.

Suggestions

The "Next up" and "Picked for you" lists suggest games and tools you haven't tried, daily games you haven't played today, and things like the ones you play most. Your browser works these out itself from jf-library-v1. That history is never sent to us or anyone else, we can't see it, and it isn't used for advertising. If you turn suggestions off, the lists go back to the same picks for everyone and the history they use is deleted. "Clear recent history" deletes it too.

4) Who receives data

  • Our hosting and website maintenance providers (20i, and Swift Web Design), who run and look after the site on our instructions.
  • Google, for Google Analytics if you accept it, and for Google Fonts when you use the Font Pairing Generator. That tool loads its font previews from Google's servers, which receive your IP address and browser details. No other page loads Google Fonts.
  • The 26 sites the Username Checker asks (such as YouTube, TikTok, Discord and GitHub), which receive only the username you chose to check, sent from our server.

We never sell personal data or share it for advertising.

5) Transfers outside the UK

The site is hosted in the UK. Google may process analytics data and font requests in the United States. Google LLC is certified under the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), which the UK recognises as giving adequate protection.

6) Your rights

Under UK data protection law you can ask to access, correct or delete your personal data, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Email info@josh-fun.co.uk; we reply within one month. Because we don't know who you are, we can usually only find data for you if you tell us roughly when you visited.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.