Privacy Policy
Last updated: 10 October 2026
Who is responsible
The data controller for cryptogram.dev is Sebastiano Presti Recupero, Italy. Contact: admin@mindinsight.info.
Your cryptographic data stays in your browser
All encryption, decryption, hashing, signing and key generation happen locally in your browser using the Web Crypto API and JavaScript. The text, files, keys and passwords you enter are never sent to our servers or to any third party, and are never included in analytics.
Analytics (only with your consent)
If you click Accept in the cookie notice, we load Google Analytics 4, provided by
Google Ireland Limited. It sets cookies (_ga, _ga_*) and collects
pseudonymous usage data: pages and features used (for example which cipher was selected),
device and browser type, approximate location derived from your IP address, and timing.
We use it only to understand which features are used and to improve the site.
- Legal basis: your consent (Art. 6(1)(a) GDPR). If you decline, Google Analytics is not loaded at all.
- Withdrawing consent: use “Cookie settings” in the footer at any time. Declining stops tracking and deletes the analytics cookies.
- Transfers: Google may process data in the United States under the EU-U.S. Data Privacy Framework.
- Retention: analytics data is kept for up to 14 months.
Data stored on your device
These items are saved in your browser's local storage, are never transmitted, and are needed for the site to work:
| Item | Purpose |
|---|---|
cryptogram-theme | Remembers light or dark theme |
cryptogram-analytics-consent | Remembers your cookie choice |
| Learning progress | Stores your XP, level and completed challenges |
You can delete them at any time by clearing this site's data in your browser.
Hosting
The site is hosted by Cloudflare, Inc., which processes technical data such as IP addresses to deliver the site and protect it from abuse.
Your rights
Under the GDPR you can request access to, correction or deletion of your personal data, object to or restrict its processing, and withdraw consent at any time. You also have the right to lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali.