Privacy Policy

The short version: PaperCarnival has no accounts and no server that stores what you make. The names, word lists and activity content you type into our tools are processed in your browser and are never uploaded to PaperCarnival. This page explains exactly what that does and does not cover.

1. What you type into a tool

Every tool on this site runs entirely in your browser, the seven printable generators and every on-screen tool alike. When you type a word list, a class roster, or the names of your guests, that text is not sent to PaperCarnival. There is no upload, no API call, and no server-side account to store it in. The same is true of a spreadsheet or .csv you import into the seating chart, and of photos you add to picture bingo: the file is read by your browser and never leaves it.

Two things follow from this that are worth being plain about. We cannot retrieve your lists for you, and we cannot delete them for you either, because we never had them. They live on your device, and clearing your browser data removes them.

The generator pages load no advertising script. The only script from outside this site that runs there is our host's cookieless visit counter, described below. That is deliberate: those pages hold your names in the page address, and no advertising code runs there.

2. Ordinary web serving

PaperCarnival is a website, so a request for a page has to reach a server. Our hosting provider (Cloudflare) processes the technical information any web server receives in order to deliver the page and protect the site: your IP address, the page requested, your browser's user-agent string, and similar request data. This is standard infrastructure processing, handled under our host's terms.

On top of that, we count visits with Cloudflare Web Analytics. Cloudflare, which serves this site, adds a small script to each page as it is delivered. It records that a page was viewed, the page address, the page that linked to it, the type of browser and device, the country the request came from, and how quickly the page loaded. It sets no cookie, stores nothing on your device, and gives us no identifier for you. We see totals: how many visits, which pages, from which countries. We cannot see who you are or link one visit to another. Cloudflare's own privacy policy governs what it does with that data. Beyond that one counter there is no Google Analytics, no tag manager, no pixel, no heat-mapping, and no error reporting. We do not build a profile of you, and we do not sell or share personal information.

3. Shared links

The seven generators and the wheel keep their whole setup, your list included, in the part of the page address after the # (the "fragment"). Many other tools keep their settings there too. The tools that share a player list never put the names in the address: those stay in this browser. Browsers do not send the fragment to a server, which is why a shared link can carry your list without any of it reaching us.

That also means the content is in the link itself. Anyone you send the link to can open it and see the names, words or prompts it contains, and so can anything the link passes through, a messaging app, an email provider, a shared browser's history. Treat a share link containing real names the way you would treat the list itself.

4. What is stored on your device

Nothing here is sent anywhere. It is all local storage in your own browser, under your control:

• Your cookie choice, in local storage underpph.consent. It stores only the word "granted" or "denied", so we can stop asking. Removed by clearing your browser's site data.
• Players, in local storage under pph.players: the player names you typed, which can be real names because that is what you typed, shared by every tool that has players. Removed in the tool or by clearing your browser's site data.
• Bingo card generator, in your browser's IndexedDB database: the photos you add to a picture bingo card, which stay on the device and are never uploaded. Removed in the tool or by clearing your browser's site data.
• Seating chart maker, in local storage under pph.rosters (the guest or class lists you saved, which can hold real names because that is what you typed, and every other column a spreadsheet you imported happened to carry, contact and dietary ones included; all of it stays on this device) and pph.charts (the seating charts you saved, including the names on them). Removed in the tool or by clearing your browser's site data.
• Word grid, in local storage under pph.grid.game (today's puzzle in progress), pph.grid.stats (your scores and streak) and pph.grid.timed (whether the timed mode is on). Removed in the tool or by clearing your browser's site data.
• Guess the country, in local storage under pph.globe.level (the difficulty you chose), pph.globe.round (the round in progress), pph.globe.stats (your scores and streak) and pph.globe.timed (whether the timed mode is on). Removed in the tool or by clearing your browser's site data.
• Typing test, in local storage under pph.typing.bests (your best speeds), pph.typing.difficulty (the difficulty you chose) and pph.typing.duration (the test length you chose). Removed in the tool or by clearing your browser's site data.
• Bag of tokens, in local storage under pph.bag.items (the tokens you typed), pph.bag.replace (whether tokens go back in after a draw), pph.bag.count (how many you draw at a time) and pph.bag.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Marbles in a bag, in local storage under pph.marbles.bag (the colours and how many of each), pph.marbles.replace (whether a marble goes back in), pph.marbles.count (how many you draw at a time), pph.marbles.odds (whether the odds table is shown) and pph.marbles.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Tile bag, in local storage under pph.tiles.pool (the tiles you wrote yourself), pph.tiles.preset (which ready-made bag you chose), pph.tiles.hand (how many tiles a hand holds) and pph.tiles.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Names in a hat, in local storage under pph.hat.remove (whether a drawn slip stays out), pph.hat.mode (whether the hat pulls one name or pairs everybody), pph.hat.pairs (who has whom this round, as ids) and pph.hat.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Raffle drum, in local storage under pph.raffle.range (the ticket numbers you set), pph.raffle.mode (whether the drum holds numbers or names), pph.raffle.count (how many you draw at a time), pph.raffle.remove (whether a winning ticket stays out) and pph.raffle.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Mystery envelopes, in local storage under pph.envelope.items (the outcomes you wrote), pph.envelope.count (how many envelopes are on the table), pph.envelope.pad (whether spare envelopes hold a blank) and pph.envelope.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Bag builder, in local storage under pph.bagbuilder.bag (your token names, counts and rules) and pph.bagbuilder.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Lottery ball machine, in local storage under pph.lotto.preset (which game you picked), pph.lotto.range (the numbers your own game runs between), pph.lotto.called (the numbers called so far, so a refresh keeps the game), pph.lotto.count (how many balls a call gives), pph.lotto.board (whether the called board is shown), pph.lotto.big (whether the called ball is shown large) and pph.lotto.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Blind draw, in local storage under pph.blind.fill (which kind of draw the cards hold), pph.blind.count (how many cards are on the table), pph.blind.items (the outcomes you wrote yourself), pph.blind.flip (whether the cards turn together or as they are chosen) and pph.blind.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Claw machine, in local storage under pph.claw.items (the prizes you wrote), pph.claw.chance (the grab chance you set), pph.claw.remove (whether a won prize leaves the cabinet) and pph.claw.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Pull-tab ticket, in local storage under pph.tabs.items (the lines you wrote under the tabs), pph.tabs.mode (whether the tabs come off in order), pph.tabs.count (how many tabs a symbol ticket has), pph.tabs.match (whether the tabs hide symbols instead of your lines) and pph.tabs.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Call the toss, in local storage under pph.toss.match (how long the match is), pph.toss.caller (whether the call alternates or stays with one side), pph.toss.sides (the names you gave the two sides) and pph.toss.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Magic 8 ball, in local storage under pph.eightball.bank (which set of answers the ball uses), pph.eightball.custom (the answers you wrote yourself), pph.eightball.motion (whether shaking the phone asks the ball) and pph.eightball.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Paper fortune teller, in local storage under pph.fortune.bank (which set the fortunes come from), pph.fortune.custom (the fortunes you wrote yourself), pph.fortune.colours (the four colour names) and pph.fortune.paper (the paper size for the printed template). Removed in the tool or by clearing your browser's site data.
• Judge's gavel, in local storage under pph.gavel.bank (which verdict set is loaded), pph.gavel.verdicts (the verdicts you wrote yourself), pph.gavel.mode (whether the host or the gavel decides) and pph.gavel.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Plinko board, in local storage under pph.plinko.rows (how many rows of pegs the board has), pph.plinko.column (which column the disc drops from), pph.plinko.labels (the labels you wrote on the slots) and pph.plinko.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Draw and discard pile, in local storage under pph.discard.deck (which deck is on the table), pph.discard.cards (the cards you wrote yourself), pph.discard.limit (how many cards a hand holds), pph.discard.auto (whether an empty draw pile shuffles itself) and pph.discard.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Deck builder, in local storage under pph.decks: the decks you built and the cards in them. Removed in the tool or by clearing your browser's site data.
• Turn order cards, in local storage under pph.order.state (the order and whose turn it is, as ids), pph.order.rules (whether the order reshuffles or reverses each round) and pph.order.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Deck shuffler, in local storage under pph.shuffle.deck (the cards you wrote yourself), pph.shuffle.deal (how many hands and how many cards each), pph.shuffle.private (whether hands are shown one at a time) and pph.shuffle.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Secret role cards, in local storage under pph.roles.setup (the role names and counts you set), pph.roles.deal (who has which role this game, as ids) and pph.roles.reveal (whether a role is held or tapped to see). Removed in the tool or by clearing your browser's site data.
• Hidden information cards, in local storage under pph.hidden.cards (the cards you wrote and which set is chosen), pph.hidden.deal (which card each player holds this game) and pph.hidden.reveal (whether a card is held or tapped to see, and when it hides). Removed in the tool or by clearing your browser's site data.
• Random event deck, in local storage under pph.events.deck (the events you wrote and which set is chosen), pph.events.trigger (how often an event lands) and pph.events.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Countdown timer, in local storage under pph.timer.muted (whether the end sound is on), pph.timer.chime (which end sound you chose) and pph.timer.volume (how loud it is). Removed in the tool or by clearing your browser's site data.
• Coin flip, in local storage under pph.coin.muted: whether sound is on. Removed in the tool or by clearing your browser's site data.
• Dice roller, in local storage under pph.dice.count (how many dice you roll) and pph.dice.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Lives tracker, in local storage under pph.lives.state (how many lives each player has left), pph.lives.start (how many lives everybody starts with), pph.lives.mode (whether lives are shared or one each) and pph.lives.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Health bar tracker, in local storage under pph.hp.state (how many hit points each player has left), pph.hp.steps (the three damage and healing step sizes) and pph.hp.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Energy meter, in local storage under pph.energy.state (how much energy each player has left), pph.energy.rates (which way the meters move, how fast, and whether alerts are on) and pph.energy.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Progress track, in local storage under pph.track.state (how long the track is, where each piece has got to and whose turn it is), pph.track.labels (which set of labelled spaces you chose and any lines you wrote yourself) and pph.track.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Round marker, in local storage under pph.round.state (which round and phase you are on, how many rounds the game runs for, and the last twelve steps), pph.round.phases (the phase names you typed) and pph.round.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Score tokens, in local storage under pph.tokens.state (how many tokens of each value each player is holding), pph.tokens.denoms (what the four tokens are worth) and pph.tokens.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Power-up tokens, in local storage under pph.power.abilities (the abilities you wrote, their symbols and how many uses each one has), pph.power.state (what each player has spent, when abilities come back, and the last twelve uses) and pph.power.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Scoreboard, in local storage under pph.score.board: team names, points and positions. Removed in the tool or by clearing your browser's site data.
• Race track, in local storage under pph.race.state (how far each car has gone and whose turn it is), pph.race.rules (how many spaces are in a lap and how many laps win it) and pph.race.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Leader token, in local storage under pph.leader.state (who holds the token, the round number and the last twelve rounds), pph.leader.rule (how the token moves at the start of a round) and pph.leader.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• First player token, in local storage under pph.first.state (who starts this round, who has already started one, and how many draws there have been), pph.first.rule (how the starter is decided) and pph.first.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Round modifiers, in local storage under pph.roundmod.state (the round number, the modifier in play and everything already drawn), pph.roundmod.custom (the modifiers you wrote yourself) and pph.roundmod.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Weather modifier, in local storage under pph.weather.states (the states and effects you wrote, which one is in play and the ones before it), pph.weather.mode (whether the weather changes each round or on a clock, how often, and whether the forecast is shown) and pph.weather.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Inventory tray, in local storage under pph.inv.items (the item types you wrote, with their symbols) and pph.inv.state (what each player and the bank hold, and the last moves). Removed in the tool or by clearing your browser's site data.
• Set collection board, in local storage under pph.sets.defs (the sets you wrote and what they score) and pph.sets.state (which members each player has collected). Removed in the tool or by clearing your browser's site data.
• Crafting table, in local storage under pph.craft.recipes (the recipes you wrote), pph.craft.inv (what each player is holding) and pph.craft.found (which recipes have been discovered). Removed in the tool or by clearing your browser's site data.
• Puzzle pieces, in local storage under pph.puzzle.state (the picture, how many pieces and who has earned which) and pph.puzzle.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Keys and locks, in local storage under pph.unlock.locks (the locks you wrote, the keys they need and what they reveal), pph.unlock.state (which keys each player holds and which locks are open) and pph.unlock.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Treasure chest, in local storage under pph.chest.items (the chests you wrote, what is inside and how each one opens) and pph.chest.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Safe combination, in local storage under pph.safe.setup (the combination, the clues you wrote and the lockout rule) and pph.safe.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Timer bomb, in local storage under pph.bomb.range (the shortest and longest fuse you set), pph.bomb.tell (whether the ticking speeds up near the end and whether the holder is knocked out) and pph.bomb.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Hot potato, in local storage under pph.potato.range (the shortest and longest round you set), pph.potato.rules (whether the direction can reverse and whether players are knocked out) and pph.potato.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Musical chairs, in local storage under pph.chairs.range (the shortest and longest the music plays), pph.chairs.tune (which tune is chosen) and pph.chairs.volume (how loud it plays). Removed in the tool or by clearing your browser's site data.
• Red light, green light, in local storage under pph.rlgl.timing (how long each signal lasts and whether amber is used) and pph.rlgl.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Dice tower, in local storage under pph.tower.count (how many dice go in the top) and pph.tower.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Dice cup, in local storage under pph.cup.count (how many dice are under the cup), pph.cup.motion (how hard a shake has to be) and pph.cup.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Dice pool roller, in local storage under pph.pool.last (the last pool you built, as dice and rules) and pph.pool.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Hex and grid board, in local storage under pph.hex.boards (the boards you saved, their terrain and their tokens) and pph.hex.current (the board on screen now). Removed in the tool or by clearing your browser's site data.
• Fog of war board, in local storage under pph.fog.state (which cells are uncovered, the fog radius and which view is showing), pph.hex.boards (the boards saved on the hex board page, which this page can load) and pph.hex.current (the board on screen now, shared with the hex board page). Removed in the tool or by clearing your browser's site data.
• Map exploration, in local storage under pph.map.tables (the locations and events you wrote), pph.map.state (which tiles are explored and the trail behind you) and pph.map.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Dungeon room generator, in local storage under pph.dungeon.tables (the tables you wrote), pph.dungeon.visited (the rooms drawn so far) and pph.dungeon.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Encounter table roller, in local storage under pph.encounter.tables (the tables you wrote and which one is in use) and pph.encounter.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Boss phase tracker, in local storage under pph.boss.setup (the boss you set up, its health and the rules for each phase), pph.boss.state (the health it has now and the phase it is in) and pph.boss.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Pictionary words, in local storage under pph.pict.teams (team names), pph.pict.bowl (the prompts you wrote for the bowl, and whether the bowl is in play), pph.pict.category (the word category you chose), pph.pict.difficulty (the difficulty you chose), pph.pict.round (the round length you chose) and pph.pict.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Jar of questions, in local storage under pph.jar.bank (which set of questions is in the jar), pph.jar.custom (the questions you wrote yourself) and pph.jar.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Penalty wheel, in local storage under pph.penalty.bank (which set of penalties is on the wheel), pph.penalty.custom (the penalties you wrote yourself) and pph.penalty.spin (how long a spin lasts). Removed in the tool or by clearing your browser's site data.
• Truth or dare bottle, in local storage under pph.tod.tier (whether the family or grown-ups prompts are in play), pph.tod.custom (the truths and dares you wrote yourself) and pph.tod.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Simon says, in local storage under pph.simon.bank (which set of commands is in play), pph.simon.custom (the commands you wrote yourself), pph.simon.pace (how fast it calls and how often Simon says it) and pph.simon.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Charades bowl, in local storage under pph.bowl.custom (the slips you wrote and which set is chosen), pph.bowl.teams (team names and scores), pph.bowl.round (how long a turn lasts and which game you are playing) and pph.bowl.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Forbidden words cards, in local storage under pph.taboo.custom (the cards you wrote and which set is chosen), pph.taboo.teams (team names and scores), pph.taboo.round (how long a turn lasts and what a buzz costs) and pph.taboo.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Never have I ever, in local storage under pph.nhie.tier (which set of statements is chosen and whether the grown-ups sets are showing), pph.nhie.custom (the statements you wrote yourself) and pph.nhie.fingers (whether fingers mode is on and how many fingers each player has left). Removed in the tool or by clearing your browser's site data.
• Would you rather, in local storage under pph.wyr.tier (which set of questions is chosen and whether the grown-ups sets are showing), pph.wyr.custom (the pairs you wrote yourself) and pph.wyr.vote (whether the room votes by counted hands or by passing the device). Removed in the tool or by clearing your browser's site data.
• Challenge cards, in local storage under pph.challenge.custom (the challenges you wrote yourself), pph.challenge.deck (which set is in play and which cards are done, skipped or still to come), pph.challenge.tally (how many challenges are done and who did them) and pph.challenge.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Telephone game, in local storage under pph.telephone.rules: how long the message shows and whether the first sentence stays hidden. Removed in the tool or by clearing your browser's site data.
• Whispers referee, in local storage under pph.whispers.rules (how many seconds a pass gets and which set of phrases is chosen) and pph.whispers.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Ring-in bell, in local storage under pph.bell.voice (which bell you chose and how long its countdown runs) and pph.bell.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Majority vote, in local storage under pph.vote.history: the questions you asked and how each one came out, the last twenty. Removed in the tool or by clearing your browser's site data.
• Secret ballot box, in local storage under pph.ballot.rules (whether people may vote for themselves and whether a tie runs off) and pph.ballot.awards (the award categories you wrote). Removed in the tool or by clearing your browser's site data.
• Prediction slips, in local storage under pph.predict.tally (how many points each player has, against their name in your roster) and pph.predict.scoring (how many points an exact answer, a closest answer and a right choice are worth). Removed in the tool or by clearing your browser's site data.
• Auction paddles, in local storage under pph.auction.lots (the lots you wrote), pph.auction.state (how many points each player has left and which lots they won) and pph.auction.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Quiz buzzer, in local storage under pph.buzzer.mode (whether players tap a zone or press a key), pph.buzzer.zones (how many buzzers are on the board), pph.buzzer.falsestart (whether going early locks a player out) and pph.buzzer.muted (whether sound is on). Removed in the tool or by clearing your browser's site data.
• Scrum poker, in local storage under pph.poker.custom (your custom card values), pph.poker.deck (which deck you chose), pph.poker.mode (which mode you chose) and pph.poker.rounds (the last fifty rounds, their story names and their votes). Removed in the tool or by clearing your browser's site data.
• Whiteboard, in local storage under pph.board.strokes (your drawing), pph.board.tool (the pen you last used), pph.board.color (the pen colour) and pph.board.size (the pen size). Removed in the tool or by clearing your browser's site data.

None of the above is personal in itself, except where you choose to type a name. That happens more often than it used to: a single shared player list, pph.players, is read and written by around thirty-seven of the tools, so a name typed into one of them is the name the next one shows. It is still only on this device. Clearing your browser's site data for papercarnival.com removes all of it. Because it is per-device and per-browser, saved work does not follow you to another computer, and the export/import backup in the seating tool exists for exactly that reason.

5. Cookies and advertising

PaperCarnival sets no cookies of its own. This site is free, and we intend to pay for it with advertising from Google AdSense. We applied, and Google has not approved the site, so no advertisement is shown. Google's advertising script still loads on every page except the seven generator pages that hold your names and lists, this page and the Cookie Policy. Loading that script is a request to Google: Google's servers see your IP address, the page you are on and what your browser tells every site. We set Google's consent signals to "denied" before the script loads, using the banner described in our Cookie Policy, so it sets no advertising cookie unless you agree to one.

If the application is approved, Google and its advertising partners may use cookies to show ads based on your visits to this and other sites. If you are in the EEA, the UK or Switzerland, Google's consent message will ask you first and you can refuse; refusing gives you non-personalized ads. Advertising is never loaded on the generator pages, never appears in printed output, and never appears in a downloaded PDF.

Advertising partners operate under their own privacy policies and, in the course of serving an ad or reviewing the site, receive technical information such as your IP address, browser and the page being viewed. We never pass them the content you type into a tool. See the Cookie Policy for the detail, including exactly what our consent banner does and does not guarantee. This page will change when ads go live, and the date at the top will change with it.

You can turn personalized advertising off at Google's Ads Settings, opt out of participating vendors at the Digital Advertising Alliance and, in Europe, at youronlinechoices.eu.

6. Email

If you email us at hello@papercarnival.com, we have your address and whatever you chose to write, and we use it only to reply. We keep it for as long as it takes to deal with it and for up to twelve months afterwards, then delete it. It does not go on a mailing list and we do not pass it on.

7. Your privacy rights

Because we hold no account data and never receive your activity content, there is very little for us to hold in the first place. Even so, U.S. residents, including California residents under the CCPA/CPRA, have the right to know what personal information a business collects, to request deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information. If you are in the EEA or UK and have a question about how the advertising partner processes data, their own policy covers it, and you can withdraw consent at any time using the Cookie preferences link in the footer.

You may ask what we hold about you, ask for it to be corrected or deleted, or object to its use, by emailing hello@papercarnival.com. Almost always the answer is that we hold nothing, because everything you make stays on your device. You can also complain to South Africa's Information Regulator (inforegulator.org.za). If you are in the UK you can complain to the Information Commissioner's Office; in the EU, to your own supervisory authority.

8. Children's privacy

PaperCarnival is designed for teachers, parents, party hosts and other adults making printable activities. It is not an account-based service for children, it has no profiles, no messaging and no social features, and it does not ask any visitor for personal details.

A teacher or parent may of course type children's names into a tool. We want to be exact about what happens then: those names are processed in the browser and never uploaded to PaperCarnival, and we never pass them to an advertising partner. This site is not directed at children, and we do not knowingly collect personal information from anyone: nothing here asks for an age or a name of its own accord, and the tools ask for nothing and upload nothing. South African law treats anyone under 18 as a child; the U.S. Children's Online Privacy Protection Act (COPPA), anyone under 13. If you believe a child has sent us personal information, email hello@papercarnival.com and we will delete it.

9. Changes to this policy

We may update this policy from time to time; the "last updated" date above will change when we do. If a change means new information starts being collected, we will say so plainly rather than quietly.

10. Who operates this site

PaperCarnival is operated by Inyonitech Solutions (Pty) Ltd, a company registered in South Africa and based in Cape Town. Under the Protection of Personal Information Act (POPIA) it is the responsible party for any personal information this site processes, and under the GDPR and the UK GDPR it is the controller. Its Information Officer is registered with South Africa's Information Regulator and can be reached at hello@papercarnival.com.

There is no representative in the European Union, and that is a considered position rather than an oversight. Article 27 of the GDPR asks a controller outside the EU to appoint one unless its processing is occasional, involves no large-scale handling of special categories of data, and is unlikely to put anyone's rights at risk. All three hold here. The site has no accounts, no sign-up, no forms and no server-side logging, so a visit from the EU leaves nothing behind that we could look up later. Everything a visitor types stays in their own browser. The only personal information that reaches anyone at all is the ordinary request data our host handles to deliver a page, and whatever the advertising partner collects once a visitor has said yes to it, which is covered by that partner's own policy. If that ever changes, this paragraph changes with it.

11. Contact

Questions about privacy? Reach us via the contact page.