LITTLE SPARK WORKS
Privacy
Last updated: 23 October 2026. This notice is for the Little Spark Works Christmas website, not Wedding Puzzle Studio.
Who is responsible?
Paul Sidwell trading as Little Spark Works is the controller. Contact paulsidwell1@googlemail.com or write to 19 Brookdale, Hinckley, LE10 0NX, United Kingdom.
Saving your progress on this device
As you personalise, the site saves one draft in this browser's local storage: your family/group name, title, theme, game entries and current step. This lets you resume on the same browser profile and device without an account. The browser draft is not uploaded to us or sent to Stripe. Delivery email, payment details, purchase acknowledgements and preview approval are not included. Drafts can be restored for 30 days after the last saved edit; an expired draft is removed when you next visit. Use “Start again / clear saved draft” to remove it sooner. Clearing site data also removes it. Private browsing or blocked/full browser storage may prevent saving or remove the draft when the session closes. Anyone using the same browser profile may be able to see your draft, so avoid sensitive information and clear it after using a shared device. Local saving is separate from any paid order or downloaded PDF.
What we use and why
Your preview is generated in your browser tab. If you start checkout, we use your family/group name, title and clues to make the PDF, and your email address to deliver it. We keep the order reference, payment status, price and consent record to fulfil the contract, answer queries and meet bookkeeping obligations. We rely on the contract for fulfilment, legal obligations for required accounting records and legitimate interests for proportionate fraud prevention and support. Do not include sensitive personal details in clues; first names and nicknames work well.
Stripe processes payment and billing information securely. We do not receive or store your full card number. Stripe receives your email, product and an opaque order reference, not your clues or PDF. Cloudflare hosts the website, stores order data and generated PDFs, and sends transactional emails. Support correspondence is handled using Gmail. These services may process information outside the UK using their applicable international-transfer safeguards. See Stripe’s privacy notice, Cloudflare’s privacy notice and Google’s privacy policy.
Optional measurement — your choice
With your permission, we count use of the Christmas demo, sample links and personalisation steps, and whether a measured visit leads to a purchase. This helps us understand where the journey needs improvement. Measurement is optional and off until you choose “Allow measurement”. Choosing “No thanks” does not prevent you from using the demo, personalising, saving a draft or buying. We rely on your consent for this optional processing. You can change your choice or withdraw it using “Privacy settings” on the site.
Only after you opt in do we create a separate random, pseudonymous measurement identifier in a secure cookie. A measured session ends after 30 minutes of inactivity or 24 hours at the latest. We record allowlisted actions, page categories, step numbers, timestamps, release versions and recognised campaign codes. We do not put family names, clues, quiz answers, email addresses, card details, private download links or full referring URLs into measurement events. We do not use advertising pixels, session recordings or fingerprinting. Recognised campaign codes are taken only from the current visit after consent, not from earlier visits. We use Cloudflare to process and store these measurements for this Christmas site; they are not combined with Wedding Puzzle Studio.
If you consent and create an order in that measured session, a restricted server-side link lets us count whether that visit results in a confirmed payment. This link does not expose your order or personalisation to a browser analytics feed. Purchases without measurement consent still appear in essential sales and fulfilment records but are not attributed to a measured visit. A counted session is not proof of a unique person, and known tests or obvious automated traffic are excluded where identifiable.
We remember your measurement choice on this browser for up to 180 days. This small local-storage preference is separate from your family draft and is not used to track you. After you opt in, we also set a separate secure, HttpOnly cookie for up to 30 days solely to locate that browser's recent measurement sessions if you withdraw. This deletion-only token is not used as an advertising identifier, a cross-site identity or a reporting category. Optional raw events, attribution links and minimal consent evidence have a 30-day retention limit and are removed by the next daily maintenance run. Daily aggregate totals are kept for six months, then removed by daily maintenance, without session or order identifiers; small categories are combined where needed to avoid identifying people. Withdrawing stops optional collection, clears measurement identifiers and removes raw events and order links for sessions this browser can still identify. If you have cleared browser data, contact us about rights requests; we may no longer be able to locate an anonymous-looking session. Essential order and accounting records are not deleted by withdrawal. Already irreversible aggregate totals cannot be traced back to an individual for deletion.
Cookies, security and marketing
An essential secure cookie links your browser to your order for up to seven days. It is separate from optional measurement and is not an advertising cookie. We do not add a marketing subscription. Cloudflare may process network information for security. Checkout rate limits use a short-lived keyed hash of the network address; the application does not store the raw address. Infrastructure providers may retain their own security logs under their policies.
Private PDF links are valid for seven days. Anyone who has the link can download the pack, so do not share it publicly. HTTPS and restricted server-side credentials protect transfers; no system can guarantee absolute security.
How long we retain information
Confirmed abandoned/expired checkouts are removed after three days. We keep unresolved payment records until payment status can be checked. Paid PDFs and family content are kept for 30 days to help with delivery problems, then automatically removed. Minimal paid order, delivery and consent records are kept for seven years for accounting and disputes, with routine removal shortly afterwards. Downloaded files and messages in your own inbox are under your control. Support emails are reviewed periodically and retained only as needed to resolve the issue or satisfy legal obligations.
Your rights
You can ask for access to, correction of, restriction of or deletion of your information, and where applicable object to processing or request portability. These rights can be limited where we must keep records by law. Contact us using the details above. You can complain to the Information Commissioner’s Office. Providing the information needed to make and deliver the pack is necessary for the purchase; without it we cannot fulfil an order.