Privacy notice

Who is behind this page

MazeReview is a small independent editorial page about free puzzle games published on Google Play. It is written and run by two people based in Dublin, Ireland, and it is the controller for the limited processing described below. The single point of contact is hello@mazereview.com.

What this page does not do

Being clear about the absences is more useful than a long list of possibilities, so: there is no form anywhere on this site, no account to create, no newsletter, no browser notifications and no analytics product of our own. Nothing you type is sent to us through a page, because there is nothing to type into.

• No profiling and no automated decision making.
• No advertising network, no advertising identifiers and no remarketing tags.
• No sale or sharing of personal data with anyone for their own purposes.

What is processed when you open a page

Like any website, this one cannot be delivered without some technical data being handled by the servers in between. Our hosting provider and Cloudflare, which sits in front of the site as a content delivery network, keep ordinary connection records containing your IP address, the address of the page requested, the referring address if there is one, your browser and device type, the approximate country derived from the IP address, and the date and time.

That processing rests on our legitimate interest under Article 6(1)(f) of the General Data Protection Regulation (Regulation (EU) 2016/679): delivering the page you asked for, keeping the site available, and defending it against abuse and automated attacks. The Data Protection Act 2018 applies alongside the Regulation in Ireland.

Cloudflare as delivery network

Cloudflare acts as a processor for the delivery and security of this site. Depending on the settings applied to the account, Cloudflare may set a strictly necessary security cookie to distinguish human visitors from automated traffic, and it may inject its own performance script, which reports the page address, the referrer, standard loading measurements, the browser and device type, and the country derived from your IP address. That script does not set cookies and does not build a profile. Where personal data reaches a country outside the European Economic Area, Cloudflare relies on the European Commission’s standard contractual clauses.

If you write to us

An e-mail you send goes from your own mail provider to ours; it does not pass through this website. We then hold your address, your name if you give one and whatever you chose to write, for as long as it takes to deal with the matter and for a reasonable period afterwards in case you follow up. The basis is our legitimate interest in answering correspondence, or the steps taken at your request before any agreement.

What is stored in your browser

If you press a button on the storage notice at the foot of the page, one entry named mazereview_pref is written to your browser’s local storage so the notice stays closed on your next visit. It holds nothing but that choice, it never leaves your device, and it is not readable by us. Clearing site data in your browser removes it. The cookie policy covers this in more detail.

How long things are kept

• Server and delivery logs: kept only as long as our hosting provider and Cloudflare need them for delivery and security, normally a matter of days to a few weeks.
• E-mail correspondence: kept while the matter is open and for a reasonable period afterwards, then deleted.
• The browser entry described above: until you clear your browser data.

Your rights

Under the GDPR you may ask us for access to the personal data we hold about you, for its correction or erasure, for processing to be restricted, and for a copy in a portable format where that applies. You may object at any time to processing carried out on the basis of legitimate interest. Where processing rests on consent, you may take that consent back at any time without affecting what was done beforehand. Write to the address above and we will answer within one month.

Complaints

If you believe your data has been handled improperly, you can complain to the Irish supervisory authority:

• Data Protection Commission (DPC)
• 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
• www.dataprotection.ie

You may also complain to the authority in the country where you live or work.

Age

This page is written for a general audience and is not directed at children. In Ireland a person can give their own consent to the processing of personal data from the age of 16.

Security

The site is served over an encrypted connection and consists of static files with no database behind it and no user accounts to break into. Our provider applies the usual technical and organisational measures against unauthorised access, alteration and loss.

Changes

If the way this page works changes, this notice changes with it and the date at the top is updated. Older versions are not archived publicly, so the date is the honest way to tell whether you have read the current text.