Privacy & cookies v1.7.0

1. Who operates PopFun

PopFun.org is operated by Arianna Robinson. This policy covers popfun.org, www.popfun.org, waves.popfun.org, and their PopFun tools and pages.

For privacy questions or requests, email arianna.m.robinson@gmail.com.

If you email us, we receive your email address and the information you choose to send. We use it to respond to your request. Avoid sending sensitive information that is not needed for your question.

2. Tools, projects and saved progress

The simulations and puzzles run in your browser. They do not require a PopFun account, and ordinary use does not upload your puzzle answers, circuit projects, imported project files or waveform mixes to a PopFun account or project database.

• Device storage: some tools use browser local storage to remember settings, puzzle progress, visibility choices, projects or saved mixes. Examples include Puzzle Room, Waveform Studio, Circuit Garden and Orbit Explorer. This data can remain until you clear it, the app replaces it, or your browser removes it.
• Optional puzzle device sync: when you create or link a private sync code, Puzzle Room automatically sends encrypted copies of puzzle answers, notes, completions, bookmarks, lesson progress and settings to PopFun while the page is open. Encryption happens in your browser; the server stores encrypted data, a revision number and a verification hash for access. Your private code stays in browser storage and is not placed in page links or sent as the encryption key. Anyone with the code can read or change the linked collection. Keep it private; we cannot recover a lost code by email. Sync data currently has no automatic expiry and remains until removed by the operator. Disconnecting a device stops its sync and removes its stored code, while retaining local progress and the encrypted server copy. Different board versions replaced by sync may be kept as up to20 local recovery copies. Browser storage and downloaded backups remain available without sync. Requests are subject to size, storage and abuse limits; puzzle sync request bodies and access codes are not logged by the sync service, and its web route does not keep an access log.
• Privacy choices: a necessary first-party cookie, popfun_privacy_v1, remembers your choice to continue without ads for up to 180 days. It has no unique advertising identifier. It can be shared across PopFun subdomains. Browser settings may shorten or prevent storage.
• Imports and exports: project files you select are processed in the browser. Downloaded images, JSON, CSV and synthesized audio are created on your device. Waveform Studio records its own generated audio, not your microphone.
• Shared links: certain tools put experiment settings in shareable links. Anyone with the link can view those settings. Do not use shared links to transmit private information.
• Full snapshot links: when you choose Copy snapshot link in Fluid Lab, the two active simulation snapshots, title, settings, internal timing and graph history are sent to PopFun and stored to create a short link. Anyone with the link can open that saved snapshot, so only share content you intend recipients to see. These stored copies are immutable: editing your simulation or creating another link does not update an earlier link. Stored snapshots currently have no automatic expiry and remain until removed by the operator. Creating a link requires available storage and is subject to request limits. Settings-only links, local browser saves and downloaded snapshot files remain separate options.
• Arduino compilation: Circuit Garden’s Native Uno mode sends sketch and library source files to PopFun’s own compiler when you choose Compile or Compile & run. Builds use isolated, network-disabled temporary containers; user sketch/source files are not saved in a project database or persistent server storage. Successful firmware, compiler diagnostics and debug symbols may be cached in server memory for roughly ten minutes, then expire. Compiler requests are subject to operational logging and abuse limits; request bodies are not logged by the compiler. Circuit simulation still runs in your browser. Quick mode does not send source to the compiler. The library manager retrieves public library archives from Arduino’s official download service and verifies their registry checksums. Public registry library sources are cached on PopFun hosting for reuse in builds; these caches do not contain uploaded project source. Selected library names, exact versions and dependency locks accompany native compile requests. Debug symbols may contain source filenames and variable names and use the same short-lived in-memory cache as firmware.
• Orbital data: Orbit Explorer requests ephemeris information from a PopFun server endpoint for the selected dates. Those requests are subject to the operational logging described below.

Clearing browser storage can remove saved progress and projects. Use available export controls first if you want to keep them. Declining advertising does not erase this functional data or prevent use of the tools.

3. Website requests and operational logs

Visiting the site sends requests to our hosting systems. Operational records can include your IP address, request time, requested page or file, response status, referring page and browser user-agent information. We and our hosting/security providers use these records to deliver the site, diagnose problems and protect it from abuse.

Local web-server logs are rotated daily with up to fourteen archived rotations. Security monitoring, backups and other operational copies may follow different schedules. This is not a promise that every copy is deleted after fourteen days. Contact us about records we control and applicable privacy requests.

Private visitor analytics

We use our own hosting logs to understand how often public pages and tools are visited. The private server-log report does not add tracking cookies. Optional Google Analytics is described separately below. Google advertising and its choices are separate.

A dedicated private log records successful requests to known public pages: time, hostname, page path, connection address (IP), browser user agent and referring domain. It omits query strings, URL fragments, full referring URLs, tool inputs, search text and shared project or scene contents. Existing operational logging described above still applies.

Every five minutes, a private collector filters known bot signatures and requests without typical browser headers. It uses a secret keyed hash of the date, IP address and browser user agent to estimate daily visitors across both hosting nodes. The analytics database retains only that hash, page and date, referring domain, and coarse browser/device categories; it does not retain raw IP addresses or full user agents. Hashes differ across dates. These are estimates: shared connections can merge visitors, changing browsers or networks can split them, and unrecognized bots may remain.

The owner-only report shows daily page views and visitor estimates, popular pages and tools, referring domains, and broad device/browser summaries. Multi-day visitor-days sum daily estimates rather than identifying returning people across days. Analytics records and reports expire after 90 days. Dedicated raw logs follow the existing daily rotation with fourteen archived rotations; operational backups and security records can have different lifetimes.

The private dashboard provides an owner preference to exclude that browser’s future requests on the current hostname. This uses the functional pf_analytics_exclude cookie for up to one year, containing only an on/off value. It does not identify a visitor and does not remove previous records. Contact us about applicable rights or objections to analytics processing.

Google Analytics and regional choices

PopFun uses Google Analytics 4 (G-SL38KB3B99) to measure visits and pages used. Google’s published European consent message also manages analytics storage choices for visitors in the EEA, UK and Switzerland. Applicable US-state privacy and opt-out messages are managed by Google. PopFun no longer opens a separate worldwide Analytics approval popup.

Storage defaults are denied worldwide before the Google tag loads. Google’s region-specific settings enable analytics cookies in the US unless you previously declined or your browser sends Global Privacy Control. Outside the US, analytics cookies remain denied unless you give permission, including through Google’s applicable consent message or the Analytics choices control. If region or consent is unavailable, the denied default remains. Limited cookieless measurements may still reach Google while storage is denied; this is not anonymous or data-free processing.

Google receives page and referring page addresses, browser/device and connection information, and analytics identifiers when cookies are enabled. PopFun removes query strings and fragments from the page and referrer values it supplies; do not put personal information in public page paths. Google Signals and advertising-personalization signals for Analytics remain disabled. Analytics cookies are configured for up to 180 days.

Analytics choices is always available in the footer. An explicit local decline disables Analytics measurements on subsequent loads and removes accessible Analytics cookies; the library may still load. Previous local choices are retained for their remaining lifetime, up to 180 days across PopFun hostnames, using the functional popfun_analytics_v1 cookie. Existing declines are never replaced by regional defaults. Withdrawing does not erase records already received by Google. Google’s own consent records have their own lifetimes. Advertising choices and Continue without ads remain available separately.

The private server-log report continues as described above. Browser blockers and privacy choices affect Analytics coverage. Google may process information outside your country under its data-protection arrangements. See Google’s Privacy Policy and how Google uses information from partner sites. Analytics controls v1.2.1.

4. Google AdSense and advertising cookies

PopFun is configured to use Google AdSense to support the site. Google’s published consent messages manage applicable advertising choices. Unless you choose to continue without ads, third-party vendors, including Google, may use cookies and similar technologies to serve ads based on your prior visits to this website or other websites.

Google’s advertising cookies can enable Google and its partners to personalize ads based on visits to PopFun and other sites. Ad services may process IP addresses, page addresses, device/browser information, cookie identifiers and interactions with ads for delivery, measurement, personalization and fraud prevention. Non-personalized advertising can also use cookies or device storage for functions such as frequency capping and reporting, where permitted.

Participating advertising vendors and their purposes are presented in the consent manager when available. Other vendors shown there may also use cookies or process advertising data according to their policies and your choices. Google may process data outside your country under its published data-protection arrangements.

Read how Google uses data in advertising products, how Google uses information from partner sites, and Google’s Privacy Policy. Google and other vendors determine the lifetimes of their own cookies and consent records; our functional app storage is separate.

5. Cookie choices and your privacy rights

Open Cookie choices at the bottom of any PopFun page to continue without advertising or review available Google advertising choices. Choosing Continue without ads prevents new Google advertising requests on this browser after the page refreshes. All tools remain usable. The choice is stored for up to 180 days; you can change it later.

Google’s certified consent manager provides detailed advertising choices for audiences in the EEA, UK and Switzerland. Published US-state messages provide applicable opt-out choices. PopFun’s no-ad preference is separate: it blocks new Google advertising requests on this browser. Choosing Review Google ad choices replaces that site-level preference with Google’s consent controls; you can choose Continue without ads again at any time.

To manage Google ad personalization more generally, visit Google’s ad settings. You can also visit the Digital Advertising Alliance’s opt-out page for participating companies. These settings do not necessarily stop all ads or delete existing cookies.

Do not sell or share: you can choose Continue without ads to stop PopFun from making new advertising requests from this browser. When available, the Google consent manager may provide additional regional opt-out controls. We do not represent that an opt-out on one browser automatically applies to another browser or device.

Browser settings let you block or delete cookies and clear local storage. Declining ads here does not delete Google cookies already set previously; your browser and Google’s controls can manage those. Depending on where you live, you may have rights to access, correct, delete, restrict or object to use of personal information, or receive a copy. Email the privacy contact above. We may need enough information to verify and respond to your request. For data held directly by Google or another advertising provider, use that provider’s privacy controls as well. Where applicable, you can contact your local data-protection authority.

6. Children, external links and security

The tools can be used without submitting personal details. We do not ask tool users for an age or a profile. If you believe a child has provided personal information to us that should be removed, contact the privacy address above. Parents and guardians can help children manage browser storage, advertising choices and external links.

External websites and advertising providers have their own privacy policies. PopFun uses HTTPS for delivery, but no website can guarantee absolute security. Keep exported files and shared links private when their contents are private.

Privacy controls changelog

v1.7.0 · November 3, 2026

• Replaced the worldwide Analytics popup with Google’s regional consent messages, connected Analytics consent, and added US-specific Analytics defaults with denied storage elsewhere. Preserved existing declines, Global Privacy Control and always-accessible choices.

v1.6.0 · November 3, 2026

• Made the Google tag directly discoverable with denied-by-default advanced consent mode. Disclosed limited pre-choice cookieless measurement and preserved explicit declines and consent controls.

v1.5.0 · November 3, 2026

• Added optional Google Analytics with separate allow/decline/withdraw controls and sanitized page/referrer addresses.

v1.4.0 · November 2, 2026

• Added private server-log visitor analytics, daily estimates, restricted owner reports, retention and a functional owner exclusion preference.
• Clarified that advertising availability depends on site approval and visitor choices.

v1.3.0 · November 1, 2026

• Documented optional encrypted Puzzle Room device sync, linking codes, automatic transfers, retention and local recovery copies.

v1.2.1 · November 1, 2026

• Clarified public Arduino registry source caching, project dependency locks and temporary native debug symbols.

v1.2.0 · November 1, 2026

• Documented optional Fluid Lab full-snapshot uploads, immutable public-by-link storage, included data and current retention behavior.

v1.1.0 · November 1, 2026

• Documented user-triggered native Arduino compilation, temporary builds and short-lived in-memory firmware caching.

v1.0.1 · November 1, 2026

• Connected published Google consent messages and enabled the shared AdSense loader while preserving existing no-ad preferences.

v1.0.0 · November 1, 2026

• Published this privacy policy with operator and contact information.
• Added site-wide privacy links, cookie choices and an essential-storage preference.
• Paused optional advertising until a certified Google consent message can be published and verified.
• Documented app storage, operational logs, Google advertising and user rights.

We may update this policy as the site or its data use changes. The effective date and changelog identify the current version.