Privacy Policy
This page explains what personal data we collect when you use nonogramvalley.com, why we collect it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).
1. Controller
The data controller responsible for processing personal data on this site is:
Stuart BellKollwitzstr. 7610435 BerlinGermany
Email: contact@nonogramvalley.com
2. What we process and why
a) Server logs. When you load any page, our hosting and content-delivery providers automatically record technical information so we can serve the page and protect against abuse. This includes your IP address, user agent, the URL you requested, the HTTP status of the response, and the timestamp. We use this only for technical operation, error analysis, and abuse prevention. Lawful basis: Article 6 (1) (f) GDPR (legitimate interests). Retention: typically up to 30 days at the provider level.
d) Local browser storage. While you use the site, your in-progress state and your colour-mode preference are kept in your browser's localStorage. This data never leaves your device and is not seen by us. You can clear it at any time through your browser's site-data controls.
e) Consent records. When you respond to our cookie banner, our consent-management provider stores a record of your choices (which categories you accepted or rejected, and when). This is required so that we can honour your choices and prove that consent was given. Lawful basis: Article 6 (1) (c) GDPR (legal obligation under § 25 TTDSG). Retention: 12 months, after which the banner is shown again.
f) Advertising. We display advertising on the site through Google AdSense, operated by Google Ireland Limited. When you load a page that shows ads, AdSense may set cookies in your browser — including __gads, __gpi, NID, and IDE — to measure ad performance and, where you have consented, to personalise the ads you see based on your visits to this and other sites. The cookie banner asks for your permission before any non-essential cookies are set. If you decline, you'll still see ads, but they will not be personalised based on your browsing history. Lawful basis: Article 6 (1) (a) GDPR (consent). You can withdraw consent at any time via the "Cookie settings" link in the footer, or manage Google's ad personalisation directly at https://adssettings.google.com. Google's full description of how it uses data for advertising is at https://policies.google.com/technologies/ads.
h) Analytics. We use Google Analytics 4, operated by Google Ireland Limited, to understand how visitors use the site so we can improve it. Where you have consented to analytics cookies, Google Analytics may set cookies in your browser (including _ga and _ga_*) to recognise return visits in an aggregated form. If you decline, Google Consent Mode v2 falls back to cookieless behavioural modelling: no identifying cookies are set, and only aggregate, anonymised pings are sent. Lawful basis: Article 6 (1) (a) GDPR (consent) for cookie-based collection; Article 6 (1) (f) GDPR (legitimate interest in product improvement) for the consent-mode fallback. You can withdraw consent at any time via the "Cookie settings" link in the footer.
3. Recipients
We use the following processors to operate the site. Each one has a contractual data-processing agreement with us under Article 28 GDPR.
| Provider | Purpose | Location of processing |
|---|---|---|
| Vercel Inc., USA | Application hosting | Global edge; primary region: EU (Frankfurt) |
| Cloudflare, Inc., USA | DNS, content delivery | Global edge |
| Usercentrics GmbH, Munich, Germany | Cookie-consent management | EU (Germany) |
| Google Ireland Limited, Dublin, Ireland | Advertising (Google AdSense) | EU (Ireland) and global edge; US transfers covered by the EU–US Data Privacy Framework |
| Google Ireland Limited, Dublin, Ireland | Analytics (Google Analytics 4) | EU (Ireland) and global edge; US transfers covered by the EU–US Data Privacy Framework |
4. Transfers outside the EU/EEA
Vercel and Cloudflare are organised in the United States. Where data is processed in the United States, transfers are protected either by certification under the EU–US Data Privacy Framework or by Standard Contractual Clauses adopted by the European Commission, together with the supplementary technical and organisational measures described in those agreements. You can request a copy of the relevant safeguards by contacting us at the address above.
5. Cookies and similar technologies
We use cookies and localStorage entries in the following categories: (i) strictly necessary entries to operate the site (the in-progress state, your colour-mode preference); (ii) the consent record stored by our cookie-management provider; (iii) advertising cookies set by Google AdSense, described in section 2 (f) above; (iv) analytics cookies set by Google Analytics 4, described in section 2 (h) above. Categories (i) and (ii) are set without consent because they are technically required to provide the service or required by law; the remaining categories are set only after you accept the relevant cookie categories in the consent banner. You can manage your choices at any time using the "Cookie settings" link in the footer.
6. Your rights
Under the GDPR, you have the right to:
- request access to the personal data we hold about you (Article 15)
- have inaccurate data corrected (Article 16)
- have your data erased (Article 17)
- have processing restricted in defined cases (Article 18)
- receive your data in a portable format (Article 20)
- object to processing based on our legitimate interests (Article 21)
- withdraw any consent you have given, with effect for the future (Article 7 (3))
To exercise any of these rights, write to contact@nonogramvalley.com. We will respond within one month.
7. Right to lodge a complaint
You have the right to complain to a supervisory authority if you believe our processing of your data is unlawful. The competent authority for our establishment is:
Berliner Beauftragte für Datenschutz und InformationsfreiheitAlt-Moabit 59–6110555 Berlinmailbox@datenschutz-berlin.dehttps://www.datenschutz-berlin.de
8. Changes to this policy
We may update this policy when our processing changes — for example, when we introduce new features, or when we change a processor. The "last updated" date below reflects the most recent change. Substantive changes will be made visible on the site before they take effect.
Last updated: 6 May 2026