Privacy

Analytics without a site-owned cookie banner

MadBright uses Plausible and Google Analytics 4 to count visits and common actions such as printing. The site sends the tool and action, not the words entered into a game or puzzle.

MadBright tells Google Analytics that analytics and advertising storage are denied before it loads. MadBright does not set analytics or advertising cookies, so it does not show its own consent banner. If advertising is added later, its consent system and this notice must be reviewed before ads are enabled.

Games, links, and device storage

Copy share link puts the current game in the part of the address after the # character. Browsers do not include that part in ordinary requests to a web server. Anyone who receives the link can read the game stored in it, so do not add private, identifying, or confidential information.

Save on this device keeps a copy only in the current browser profile. Clearing site data removes it, and using another browser or device will not show it. MadBright has no account recovery and cannot restore a saved item.

MadBright counts actions such as making, printing, sharing, or revealing an answer. The count identifies the tool and action, not the words entered into the tool.

Browser and outbound services

Printing uses the browser print dialog. Copying a share link uses the browser clipboard when permission is available. External links open the named third-party service, whose privacy terms then apply.

MadBright does not upload game or puzzle files, accept public game submissions, process payments, or store game drafts or other user-created game material on a MadBright server. A report sent through the separate contact form follows the contact flow described below.

Contact reports, access, and deletion

If you submit the contact form, it sends a category, reply email, short summary, and details. Name, affected-page URL, and supporting-source URL are optional. Those fields and a Turnstile response leave your browser only when you submit the form.

The Cloudflare Worker checks the form and the Cloudflare Turnstile response; Turnstile receives the response token and the request information it needs to verify the check. The Worker keeps an accepted report in MadBright's contact inbox at Cloudflare, where it is deleted automatically 12 months after it arrives, and sends a copy to a private Discord operator channel, where it stays until we delete it. The stored report holds the fields you sent, the site and the time, but not your IP address. To stop floods of messages, the Worker counts reports from each network address and each reply address for two hours, keeping a scrambled code of each address rather than the address itself. Cloudflare and Discord may retain service records under their own terms.

Use the contact form for a privacy question, to ask what contact report we hold about you, or to request deletion. Include enough detail to find the report; we then delete both the stored report and its Discord copy. Only our team and our own inbox tools read reports, and there is no public report archive or site account view. MadBright cannot delete what Cloudflare and Discord keep in their own service logs or backups. The reply address is used when follow-up is needed.

Include the page or tool involved, but do not submit private game content, passwords, keys, billing records, or other secrets.