Guest challenges and optional participation analytics · September 7, 2026
Letter Trainer and Callsign Trainer can be used without an account or email confirmation. A cryptographically random browser UUID, creation time and optional remembered nickname are stored locally. The server binds challenges to a secret-key hash of that UUID or to the authenticated account. The signed session expires after two hours; temporary targets are deleted on verification or expiry. Individual answers are recalculated but not persistently stored. Expired unpublished result summaries are removed by daily cleanup.
Choosing Add to Leaderboard publishes a display-name snapshot, identity badge and final score summary. Account IDs, browser UUIDs, private identity hashes, IP addresses and per-question answers are not public. Published results remain until moderation/removal; changing a nickname or clearing local storage does not remove old public scores. Guest identities are not merged with later accounts. No fingerprint, email, geolocation or guest account is required. Network anti-abuse counters use a short-lived secret-key IP hash, not a public IP label.
Where first-party analytics is permitted by your consent and privacy settings, tool events record tool/version, interface language, identity class, random-browser hash, timestamps, starts, verified completions, successful submissions and coarse activity durations. They contain no nickname, answers, audio, keying, location input or full IP address; unlike general site analytics, tool events do not retain an encrypted full IP. Existing 90-day event retention and aggregate reports apply. Unique browsers are estimates, not individual people. Opting out of analytics stops measurement but does not erase the separate challenge identity or published scores. You can clear the browser ID and remembered name through browser storage settings. CW Room identity and communication rules are unchanged. Contact hello@cw599.com for review or removal requests.
CW599 account and identity
Registration stores email, a private internal account ID, a public CW599 username, email-confirmation status and timestamps, username-change timestamps, and former usernames during a 90-day reservation. Confirmation and email-change links store only a token hash, purpose, expiry, and use time; raw tokens are not stored. Callsign is optional and remains separate. A future external provider mapping may store a provider name and provider subject only after explicit account linking; phone numbers and WeChat identities are not collected in this release.
Guestbook confirmation drafts
Before email confirmation, a guestbook message and optional operator details are encrypted and stored as a private draft. They are not placed in public moderation or returned by the public endpoint. Unconfirmed drafts are deleted after seven days. Anonymous account-conversion events record only event type, context, and time, never email, username, callsign, or message text.
Overview
This Privacy Policy explains how CW599 handles information when you use our website, CW tools, community features, shop, and support channels. Questions and privacy requests can be sent to hello@cw599.com.
Information you provide
Depending on the feature you use, this can include your email address, account information, callsign, optional QTH and rig details, guestbook message, order and delivery information, and correspondence with us. Guestbook email addresses are private. Public guestbook entries show only information selected for publication after review.
Callsign verification
If you request callsign verification, we collect the callsign, issuing country or region, optional expiry information, and the licence image you submit. Licence evidence is kept in encrypted private storage for verification and service-safety purposes. It is not shown publicly. Verification may control access to transmitting features in CW Room.
Payments and orders
Payment providers process payment information directly. CW599 does not store full payment-card numbers. We retain order, delivery, and support information needed to fulfill purchases, handle customer service, prevent fraud, and meet applicable record-keeping obligations.
Analytics and technical data
CW599 uses a self-hosted first-party analytics system for page views, key link clicks, approximate region, device, and source. It does not record passwords, form text, guestbook messages, Morse keying, per-letter answers, or audio. Full IP addresses are encrypted and retained for no more than 30 days; anonymous events are retained for 90 days; daily aggregates may be retained long term. Visitors in the EU, UK, and Switzerland are measured only after consent. Every visitor can opt out and clear the browser identifier through “Analytics privacy choices” at the bottom of any page.
We may also use Jetpack/WordPress.com services for site operations or aggregate traffic reporting. Their processing is governed by their own privacy documentation.
Tools, location, and maps
Most CW tool activity runs locally in your browser. The Maidenhead Grid Locator calculates GPS position and locator values in your browser; GPS coordinates are not sent to CW599. Address searches are sent to our controlled geocoding service only when you submit a search. Map tile providers receive your IP address and requests for the map areas you view.
Cookies and advertising
CW599 may use Google AdSense and other third-party advertising services. Third-party vendors, including Google, may place or read cookies on your browser and may use web beacons, IP addresses, or similar technologies to serve, measure, and personalize advertising. Google may use advertising cookies to show ads based on your previous visits to CW599 or other websites.
You can manage or opt out of personalized advertising through Google Ads Settings. You may also opt out of personalized advertising from certain participating third-party vendors through industry opt-out services such as AboutAds. See our Cookie Policy and Advertising Disclosure for details.
Where required by law, including for visitors in the EEA, the United Kingdom, and Switzerland, CW599 obtains the required consent before enabling relevant advertising storage or personalized advertising.
Sharing and retention
We share data only with service providers needed to operate the site, process payments, deliver orders, provide email, host maps, or support consent and security functions. We do not sell personal information. Retention depends on the purpose, legal obligations, fraud prevention, and service safety. You may ask us to access, correct, or delete personal information, subject to information we must retain for legitimate or legal reasons.
Changes
We may update this policy as the site changes. The current version is published on this page.
Last updated: August 10, 2026