Privacy
What this site does with your information.
Last updated 1 September 2026.
I’m Matt Holland. I run a few personal websites and apps, and this page explains what they do with your information.
What I collect when you sign in
If you sign in, you will sign in with an account you already have somewhere else, Google is supported at the moment. I never see your password. Google checks it and tells me who you are. That gives me:
| Your email address | Which is how I know it’s you. Everything else is attached to this. |
|---|---|
| Your name | So pages can greet you properly. |
| Your profile picture | If you have one. |
Individual apps will also store what you do in them, like filling out a form or uploading a file. It depends entirely on the app, and should be obvious from using it.
Saving your game progress
I have some games and puzzles you can play without properly signing in.
If you’d like your game or puzzle results to be saved and to follow you from one device to another, you can enter an email address and confirm it by clicking a link I send you. I don’t keep the email address. I keep a fingerprint of it, and your results are filed under that. Here’s what gets stored:
| Your results | Whether you won or lost each day. |
|---|---|
| Your streak | How many days in a row you’ve won. |
| A game in progress | The guesses you’ve made in a current game, so you can pick it up somewhere else. |
This isn’t the sign-in described above. It’s not the same account, there’s no Google involved, and it gets you nothing except your own game history.
Because I don’t keep the address, the only thing I can ever send you is the sign-in link you asked for. Enter the same address later and your results come back. Ask me and I’ll delete them, or just stop using it and you’re playing anonymously again.
Where data is kept
On a server in Sydney, Australia, and in file storage in the same city. Only these apps can reach either. Backups are encrypted before they leave the server and kept for 14 days.
I live in New Zealand but use Sydney because my hosting provider has no New Zealand data centre and that’s the closest. Your information is handled under the New Zealand Privacy Act 2020.
Some of the providers below are further away than that. The clearest case is the service that sends email. Its systems are overseas, but it only gets what it needs to send the message, and the same rules apply to it as to everything else here.
Third parties
Running this lot needs a handful of specialist providers: the company hosting the server, the network carrying and encrypting traffic to it, the login provider that checks you are who you say you are, services that keep things running and monitored, a service that sends email like the sign-in link, and services that supply bits of what you see on a page, such as profile pictures, if you have one.
They only handle your information to do those jobs, and only as much as each one needs. I don’t sell it and I don’t share it for advertising. There are no ads on these sites and no third-party tracking or analytics scripts.
Cookies
Cookies keep you signed in as you move between pages, and sometimes carry a short-lived message such as a confirmation. There are no advertising or tracking cookies.
Some things are kept in your browser rather than sent to me, settings you’ve chosen, and where you’re up to. That all stays on your device.
Records of activity
When you sign in I keep a record of it: your email address, the IP address you came from, the browser you used, the rough location and internet provider that address suggests, and how you signed in. The same happens when something goes wrong and an error gets logged. If there’s ever a problem, these are what let me answer who signed in and from where.
For game progress it’s the fingerprint of your email rather than the address, so you get your own scores and nothing more.
I may also record activity briefly, like how often something has been asked for, to keep the sites running properly and stop them being misused. That’s kept only as long as it takes to do the job.
They’re all held in Sydney, some on the server and some with a monitoring provider, and they delete themselves: sign-in records after 28 days, the monitoring copies after 14. They’re not used to follow you from page to page, build a profile of you, or advertise at you, and there’s no third-party analytics or tracking service involved.
Two things get recorded even when you’re not signed in. If something breaks in your browser while you’re on one of my sites, an error report may come back with what went wrong and which page it happened on. If you play a game, the result may be recorded: which game, won or lost, how many guesses, how long it took. Neither has your name or email in it, and I can’t tie either one back to you. I look at the totals to catch a game that’s broken for everybody.
Those individual records go on the same 14-day cycle as everything else above. The running totals worked out from them stick around longer, because they’re only counts: how many games were played on a given day, how many were won. There’s nothing in them that identifies anyone.
How long I keep it
Your account details stay while you’re using the apps. Ask me to delete them and I will, along with what the apps hold about you, apart from anything I have to keep for a real reason such as a financial record. Encrypted backups take up to another 14 days to age out, and copies in file storage up to 90.
Your rights
Under the Privacy Act 2020 you can ask to see what I hold about you, ask me to correct it, and ask me to delete it.
Security
Every app uses the same sign-in and because I use a third party, Google, I don’t have to store or even know any passwords, they handle all that. Information is encrypted in transit, and backups are encrypted at rest.
Changes
If this page changes, so does the date at the top.
Contact
Email admin@hollands.net.nz about anything on this page, including asking to see, correct or delete what I hold about you.