Privacy
This site is operated by Alexandra U., who is the data controller for anything described below and can be reached at contact@mindthestack.com.
It is a small site run by one person. It has no advertising, no analytics, no tracking pixels and no third-party marketing tools. What follows is a description of everything it actually stores, written against the code rather than adapted from a template.
What is stored, and why
If you only read the site
Nothing is stored about you in the site's own database. A session cookie
named mts_session is set so the quiz can remember your progress
between questions. It contains no personal information, expires when your
browser session ends, and is not used for tracking or advertising.
Your web host records standard server access logs, which typically include IP addresses. That is normal hosting infrastructure, not something this site does deliberately, and those logs are rotated by the host.
If you submit a score
Saving a score to the leaderboard stores three things:
- The nickname you typed. Choose something that isn't your real name if you'd rather not be identifiable.
- The optional one-line note you can add after clearing four rounds, along with your score and how many rounds you cleared.
- A salted hash of your IP address, used only to limit how many entries one visitor can post per day.
On that last point: the raw IP address is never written to the database. It is combined with a secret value and hashed, and only the hash is stored. That said, hashed data is treated as pseudonymised rather than anonymous under data protection law, so it is disclosed here.
The nickname and note are shown publicly on the leaderboard, on purpose. Anything you type there is visible to anyone visiting the site and may be indexed by search engines. Don't put anything private in that field.
If you are the site administrator
The admin area stores a username and a hashed password, plus a count of failed login attempts used to lock the account temporarily after repeated failures. This applies to one account, not to visitors.
What is not done
- No advertising or ad networks.
- No analytics or visitor tracking.
- No data is sold, rented or shared with third parties for marketing.
- No accounts, no email addresses collected, no newsletter.
- No cross-site tracking cookies.
Third parties
There are none. Every file this site needs — including the fonts — is served from this domain, so loading a page contacts no other company and no third party learns your IP address. Fonts in particular are a common exception on the web, because most sites load them from Google's servers; here they are hosted locally specifically to avoid that.
The site is hosted on shared hosting, and the hosting provider processes data on the operator's behalf as part of running the server.
How long things are kept
Leaderboard entries are kept indefinitely, because a leaderboard with no history isn't much of a leaderboard. You can ask for yours to be removed at any time, and it will be, without needing a reason.
Your rights
Under the GDPR you can request access to data relating to you, correction of it, or its deletion, and you can object to its processing. In practice, for this site that almost always means removing a leaderboard entry, which is a quick thing to do.
Write to contact@mindthestack.com and mention the nickname involved. If you saved a score, your claim code identifies the entry as yours, though it is not required to have it removed. If you believe your data has been handled improperly, you also have the right to complain to your national data protection authority. In Romania that is the ANSPDCP.
Changes
If this policy changes in a way that affects what is collected, the date at the top will change with it.
Contact
contact@mindthestack.com — see the contact page.