PRIVACY
UK GDPR & Data Protection Act 2018

PRIVACY.

This notice explains what personal data Crazy 8 collects, why, and the rights you hold under UK data protection law. Last updated: June 2026.

01 Data Controller

WHO WE ARE

Crazy 8 is an independent, free-to-use ideation tool. The data controller responsible for any personal data processed through this website is the operator of crazy8ideation.com. You can reach us via the Contact page on this site.

We are not required to register with the Information Commissioner's Office (ICO) at this time because we do not process personal data at a scale or in a manner that triggers mandatory registration. We remain committed to processing any data we do receive in full compliance with the UK GDPR and the Data Protection Act 2018.

02 Data We Collect

WHAT & WHY

Crazy 8 is designed to collect as little data as possible. There is no account system, no login, and no behavioural tracking. Below is a full account of the limited data that may be processed.

Contact form submissions

When you use the Contact page to send feedback, your name, email address (optional), and message are collected. This data is processed for the sole purpose of reading and responding to your message. The lawful basis is our legitimate interest in improving the tool and communicating with people who reach out to us (UK GDPR Article 6(1)(f)).

Embedded YouTube video

The start screen includes an embedded YouTube video hosted by Google. When you interact with or play this video, Google/YouTube may set cookies and collect data about your device and viewing behaviour under their own privacy policy. We have no access to or control over this data. You should review Google's Privacy Policy for details.

Hosting and server logs

This site is hosted on Netlify. Netlify's infrastructure may automatically log technical data — such as your IP address, browser type, and pages requested — for security and service reliability purposes. This is standard web hosting practice. See Netlify's Privacy Policy for details.

No analytics or cookies

We do not use Google Analytics, tracking pixels, advertising cookies, or any first-party analytics tool. No profile is built about your visit. The tool runs entirely in your browser — your timer progress, voice settings, and session state are held only in memory and are deleted when you close the tab.

03 Retention & Sharing

HOW LONG & WHO

Contact form submissions are stored by Netlify Forms for as long as necessary to read and act on your message, and no longer than 12 months from the date of submission. We do not sell, rent, or share your personal data with any third party for marketing or commercial purposes.

  • Netlify Inc. Our hosting provider and form processor. Netlify processes form submission data as a data processor acting on our behalf, under a Data Processing Agreement. Netlify is certified under the EU-U.S. Data Privacy Framework and implements appropriate safeguards for international transfers.
  • Google LLC (YouTube) Google operates independently as a data controller for data collected via the YouTube embed. We have no data-sharing relationship with Google — any data collection is governed solely by Google's terms and privacy policy.
  • Law enforcement or legal obligation We may disclose personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court order). We will only do so to the extent required and will notify you where legally permissible.
04 Your Rights

YOUR RIGHTS UNDER UK GDPR

Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights regarding any personal data we hold about you. These rights are not absolute and may be subject to exemptions, but we will respond to all requests within one calendar month.

Right of access

You can request a copy of the personal data we hold about you (a Subject Access Request). We will provide this free of charge within one month.

Right to rectification

If any data we hold about you is inaccurate or incomplete, you have the right to have it corrected without undue delay.

Right to erasure

Also known as the "right to be forgotten." You can request that we delete personal data we hold about you where there is no legitimate reason to continue processing it.

Right to object

Where we rely on legitimate interests as our lawful basis, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

You also have the right to restrict processing and the right to data portability in certain circumstances. To exercise any of these rights, please contact us via the Contact page. We will not charge a fee and will respond within one month, with the option to extend by a further two months for complex or numerous requests.

05 Complaints & Supervisory Authority

THE ICO

If you believe we have not handled your personal data in accordance with UK data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's independent supervisory authority for data protection.

We would, however, welcome the opportunity to address your concerns directly before you contact the ICO. Please reach out via the Contact page first.

ICO
Information Commissioner's Office — ico.org.uk
0303 123 1113
ICO helpline (Mon–Fri, 9am–4:30pm)
06 Cookies

COOKIES & TRACKING

Crazy 8 does not set any first-party cookies. We do not use session cookies, persistent cookies, or tracking technologies of any kind on this domain.

The embedded YouTube video on the start screen is served by Google and may set third-party cookies on your device when you interact with the player. These are governed entirely by Google's Cookie Policy. If you prefer to avoid YouTube cookies, you can close or ignore the video — the timer and all other features of Crazy 8 will work normally without it.