Privacy policy

Website operator and contact

Speed Cube World

Speed Cube World (speedcube.world) is an independently operated personal project, not a company or organization. In these policies, “we”, “us”, and “our” refer to the individual who operates the project and is responsible for its personal-data processing. For legal questions, privacy requests, or content concerns, use the email below.

[email protected]

Information handled

Opening a page sends technical information, such as your IP address, requested URL, request time, browser and device information, and referring page where supplied, to our hosting and delivery services. Requests and errors may appear in operational or security logs. Search terms are part of the search URL and may therefore appear in those logs; do not enter sensitive personal information in search. Cookie choices, language, appearance, and algorithm-player preferences are stored in your browser as described in the cookie policy. Ordinary reading and puzzle playback do not require a reader account. We currently have no sales, payment collection, newsletters, public registration, or visitor-submission forms.

When you contact us

If you email [email protected], we receive your email address, message, and any information or attachments you choose to send. We use them to respond, handle corrections or rights requests, and keep a record where needed to resolve the matter or comply with law. Please send only information needed for your request, not passwords, payment details, or sensitive documents. We may request proportionate information to verify a privacy request, but do not require identity documents as a routine condition.

Editorial accounts and public content

Editorial accounts are used to manage the site and are not public reader accounts. We process editors' email addresses, sign-in credentials, account verification and recovery information, and session records to manage and protect their access. Published author profiles, biographies, images, and attributed articles are publicly accessible and may be indexed by search engines. Account emails are used for verification and password recovery, not to subscribe readers to marketing.

Purposes and legal bases

Where the GDPR or UK GDPR applies, we rely on legitimate interests in delivering and securing the website, administering editorial access, maintaining editorial content, and answering ordinary correspondence (Article 6(1)(f)). Necessary preference storage supports choices and services you request. Optional Google Analytics 4 and third-party video processing rely on consent (Article 6(1)(a)); you may withdraw it through Cookie settings without affecting earlier lawful processing. Handling a statutory rights request or a binding legal obligation relies on Article 6(1)(c) where applicable. Analytics helps us understand page use and improve content, not make decisions with legal or similarly significant effects about you. We do not sell personal data or currently run advertising or affiliate services.

Services that receive information

We use Vercel for hosting, Neon for database services, Cloudflare for content delivery, security and media storage, and Resend for editorial account emails. These providers process the technical, account, or delivery information needed to supply their services. Google provides Google Analytics 4 and Google Tag Manager for optional usage measurement; with analytics consent, it may receive browser identifiers, device information, page views, and usage events. YouTube (Google) and Vimeo receive your IP address, browser information, and playback activity when you enable their videos. We do not sell your personal data.

European storage and international processing

We use European data-storage regions for the site's stored data. This does not mean that every request, support operation, security service, email, or third-party analytics/video interaction remains in Europe: our providers operate internationally. Where EU/EEA or UK transfer rules apply, transfers require an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses and any necessary supplementary measures. We do not represent that a particular certification or transfer mechanism covers every provider operation. Contact [email protected] for information about the safeguards applicable to your data or to request a copy where available.

Retention

The site stops honoring a stored cookie choice after 180 days; you can clear it sooner. Other browser preferences remain until changed or cleared, and cookie lifetimes are listed in the cookie policy. Operational and security records are retained for troubleshooting, abuse prevention, and investigation for as long as needed for those purposes and under the relevant provider's retention settings. Editorial account records are kept while access is needed and then removed or limited unless security or legal requirements justify retention. Correspondence is kept as needed to answer and resolve the request and meet applicable legal obligations. GA4 retention depends on the type of analytics data and the property's settings; cookie expiry is not a deletion deadline for analytics records. Deleted data may remain in backups until those backups are rotated under the relevant service's lifecycle. There is no single fixed retention period covering all these records; contact us about a particular record or deletion request.

Your choices and rights

Use Cookie settings in the footer to reject optional categories or withdraw consent without losing access to articles and tools. Under applicable data-protection law, you may request access, rectification, erasure, restriction, or portability of your data, and object to processing based on legitimate interests. Send requests to [email protected]; we will respond within the applicable legal deadline, normally one month where the GDPR applies, subject to permitted extensions. Rights are subject to legal conditions, and we may need information to locate your data or verify your request. You may complain to the supervisory authority in your place of habitual residence, work, or the alleged infringement; UK visitors may contact the Information Commissioner's Office (ICO). You do not have to contact us before complaining.

Children and personal information

Speedcubing content can be read without submitting personal details. We do not offer reader accounts or knowingly solicit personal information from children. Technical browsing data can still be processed when a child visits. If local law requires a parent or guardian's authorization for optional processing, that authorization is needed before enabling the relevant category. If you believe a child has sent personal information that should be removed, contact [email protected].

Updates to this notice

We publish changes on this page and revise the date above when our processing changes. New purposes or providers requiring consent will be disclosed before activation and, where needed, you will be asked to make a fresh choice.