1. Who is responsible

Kryssordet.no is the data controller for the personal data collected on this website. Contact us at kontakt@kryssordet.no with any questions.

2. What we store – and where

Locally in your browser (localStorage)

Progress in crosswords, sudoku, solitaire and Nordle is stored only in your browser and never leaves your device. This includes:

• Which words you have solved in crosswords
• Sudoku progress and completed boards
• Solitaire game state
• Nordle guesses and statistics
• Streak (days in a row with solved crosswords)

You can delete this at any time via your browser settings.

Anonymous usage data (AWS DynamoDB)

We store anonymous events to understand how the service is used, for example whether a crossword was opened or completed. This is not linked to your name, email or IP address. The data is used solely to improve the service.

Multiplayer sessions (Supabase)

If you choose to play with a friend via “Play with a friend”, a temporary session is created containing your crossword answers. The session is deleted automatically after 48 hours. No personal data is linked to this feature.

Email address for prize draws (optional)

If you wish to take part in a prize draw, an email is sent directly from your own email client to kontakt@kryssordet.no. The email address is used only to contact the winner and is deleted once the draw has been completed. You can withdraw from the draw at any time by sending a new email to kontakt@kryssordet.no.

3. Cookies

We use the following services that may set cookies:

You can manage or reject cookies in your browser settings, or via youronlinechoices.com.

4. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• Access the information we hold about you
• Request that information be corrected or deleted
• Withdraw consent you have given (for example email for a prize draw)
• Lodge a complaint with your local data protection authority

Send an email to kontakt@kryssordet.no to exercise these rights.

5. Data processors

We use the following sub-processors to run the service:

• Vercel – hosting and delivery of the website (USA, Standard Contractual Clauses)
• Supabase – temporary storage of multiplayer sessions (EU)
• Amazon Web Services (AWS) – anonymous usage data (EU)
• Google – ads and conversion measurement (USA, Standard Contractual Clauses)

6. Changes

This policy may be updated as needed. The date of the last change is shown at the top of the page. Significant changes will be clearly announced on the website.