Privacy policy

Last updated: 9th November 2026

This page explains what personal information One Last Clue collects, why, and what you can do about it. I've kept it short and in plain English.

Who I am

One Last Clue is run by Lucy Armstrong, a sole trader based in the UK. I'm the "data controller" for the information described here.

What I collect

When you sign up for the advent calendar or my emails:

  • your email address
  • your first name, if you choose to give it
  • the date and time you signed up, and which form you used

When you read my emails: my email service records whether an email was delivered and opened, and which links were clicked. This shows me which puzzles people enjoy, and helps me stop emailing people who never open them.

When you email me: I receive your email address and whatever you write. Emails to [email protected] are forwarded to my Gmail inbox.

When you visit the website: my web host, Cloudflare, briefly processes technical details such as your IP address and browser type. It needs these to deliver the pages and to protect the site from attacks. I may also use Cloudflare Web Analytics, which counts page visits without cookies and without identifying you.

When you use the sign-up form: the form uses Google reCAPTCHA to stop automated spam sign-ups. reCAPTCHA looks at information such as your IP address, your device and how you interact with the form, and it may set cookies. That information goes to Google, which handles it under its own Privacy Policy and Terms of Service.

Apart from reCAPTCHA on the sign-up form, I don't use advertising or tracking cookies, and I don't use the website to build a profile of you. If you close the sign-up box or sign up, your browser remembers that so the box doesn't keep popping up. That note stays on your own device and isn't sent to me.

Downloading the advent pack and playing the daily puzzles doesn't collect anything about you.

Why I use it, and the legal basis

What I do Legal basis
Email you the free advent calendar pack Your consent, given when you sign up
Send you my newsletter: new puzzles, offers and news from One Last Clue, no more than one email a week Your consent, given when you sign up
See whether emails are opened and links clicked Your consent, given when you sign up
Reply when you email me My legitimate interest in answering your message
Keep the website running and secure My legitimate interest in running a safe website
Check sign-ups are from real people (reCAPTCHA) My legitimate interest in keeping spam off my mailing list

You can withdraw your consent at any time by clicking unsubscribe at the bottom of any email, or by emailing me. Withdrawing consent doesn't affect anything that happened before you withdrew it.

Who else handles your information

I don't sell or swap your information with anyone. I use these services to run the business, and they only handle your information on my instructions:

  • Sender (UAB Sender.lt, Vilnius, Lithuania), which stores my mailing list and sends my emails
  • Cloudflare, which hosts and protects this website and forwards emails sent to my One Last Clue address
  • Google, which provides the Gmail inbox those emails arrive in, and the reCAPTCHA spam check on the sign-up form
  • Payhip, if you buy something from my shop. Payhip has its own privacy policy for purchases.
  • Etsy, if you buy from my Etsy shop. Etsy's own privacy policy covers those orders.

Some of these companies may process information outside the UK. Where they do, they use safeguards that UK law recognises, such as the EU's adequacy status or the UK–US Data Bridge.

How long I keep it

  • Mailing list: until you unsubscribe. If you haven't opened any of my emails for 12 months, I may remove you from the list.
  • After you unsubscribe: I keep your email address on a "do not email" list so that I don't contact you again by mistake.
  • Emails you send me: for as long as I need them to help you, and no more than two years.

Your rights

You have the right to:

  • ask for a copy of the information I hold about you
  • ask me to correct it
  • ask me to delete it
  • object to, or ask me to limit, how I use it
  • withdraw your consent at any time

To do any of these, email [email protected]. I'll reply within one month.

If you're unhappy with how I've handled your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Who this site is for

My puzzles and mailing list are meant for adults. Please don't sign up if you're under 18.

Changes to this policy

If I change how I use your information, I'll update this page and change the date at the top.