Privacy Policy
Last updated 5 September 2026
There are no accounts and no sign-up, and nothing you build is sent to a server — your layouts live in the address bar and in your own browser. The site can use Google Analytics to measure how pages are used, but only if you agree to it first — decline and the analytics script is never loaded. Everything the site and its third parties receive is set out below.
What stays in your browser
The only things this site stores on your device.
Your layouts are never uploaded. When you draw a grid, the whole document is
encoded into the part of the URL after the #. Browsers do not send that fragment
to the server, so the layout you are working on never reaches us — which is also why sharing
a link shares the layout itself rather than a reference to something stored elsewhere.
Two localStorage entries. cgg-theme remembers whether you chose
the light or dark theme. cgg-consent records your answer to the cookie banner and
the date you gave it, so you are not asked again on every page. Both are strictly functional,
neither identifies you, and clearing your site data removes them.
Analytics cookies, only with consent. If you accept on the cookie banner,
Google Analytics sets cookies in the _ga family to tell one visit from another
and one visitor from another. If you decline, or simply ignore the banner, none of them are
set — the Google script is not requested at all, so there is nothing to block. These are the
only cookies the site can set, and you can change your mind at any time from
your choices below.
What the server sees
Standard hosting logs, and nothing else.
The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes the technical information needed to deliver a page: your IP address, the page requested, your browser's user-agent string, and the time. This is used for delivery, security and abuse prevention. We do not have a database and store nothing beyond what Cloudflare keeps as our host.
Cloudflare Web Analytics. Counts page views without cookies, without localStorage and without building a profile of you across sites. It reports aggregate numbers — how many people opened a page, roughly where from — not individuals.
Google Analytics 4 (property G-1STRGP1QQN), only after
you accept. This is a fuller analytics product and it works differently: it sets
cookies, assigns your browser a random
identifier, and sends Google your IP address, the pages you view, roughly where you are, and
what device and browser you use. Google processes that on our behalf to produce usage
reports. IP addresses are truncated by Google before storage, and we have not enabled
Google Signals or advertising features — so your visits here are not used to build an
advertising profile. Data may be processed on servers outside your country, including in the
United States. None of this happens unless you have accepted — the tag is added to the page
by your click, not before it. Our legal basis is your consent, which you may withdraw at any
time without giving a reason.
Neither analytics service can see what you build. Your layout never leaves your browser, so there is nothing about it for them to receive.
Third parties
Everyone else who receives anything, and exactly what.
Google Fonts. Typefaces are loaded from
fonts.googleapis.com and fonts.gstatic.com. Making that request
discloses your IP address and user-agent to Google, which is a transfer of personal data
under the GDPR. Google states the request is not used to identify you or to serve ads.
Self-hosting the fonts would remove this transfer entirely, and we intend to.
Google Analytics. Described above, and loaded only with your consent. Google acts as our processor for analytics data; its own handling is covered by the Google Privacy Policy.
CodePen, CodeSandbox and StackBlitz. These only ever receive anything when you press one of their buttons. Doing so sends the code you have generated to that service so it can open it in their editor — a deliberate action, never automatic. What happens to it afterwards is governed by their privacy policies, not this one.
Nothing is sold, rented or shared with anyone else. There are no advertising networks, no social media pixels and no session recording.
Your rights
What you can ask for, and what there is to ask about.
Depending on where you live, you may have the right to access, correct, delete or port your personal data, and to object to its processing. What exists to exercise those rights against is limited: analytics records tied to a random identifier, and hosting logs. We hold no account, no email address and no record of your work. Write to [CONTACT EMAIL] and we will respond within 30 days.
You can remove everything this site has put on your device at any time by clearing site data for cssgridgenerator.net in your browser.
Your choices
Changing your mind, and how to remove everything.
Withdrawing or giving consent. Use cookie settings — here, or in the footer of every page — to bring the banner back and change your answer. Withdrawing is exactly as easy as agreeing was, and takes effect immediately: the analytics script stops being loaded on your next page view.
If you do nothing. Ignoring or dismissing the banner counts as a refusal, not as agreement. No analytics cookies are set unless you actively accept.
We re-ask every six months. A stored answer expires after 183 days, so the banner reappears rather than treating a decision you made a year ago as permanent.
Clearing everything. Clearing site data for cssgridgenerator.net in your browser removes the theme preference, your consent record and any analytics cookies at once. Browser settings that block third-party or all cookies, and tracker-blocking extensions, work here as they do anywhere.
Children
This is a developer tool with no age-restricted content, but it is not directed at children under 13 and we do not knowingly collect anything from them. Since no personal data is collected from anyone, there is nothing held about a child either.
Changes and contact
If this policy changes, the date at the top changes with it. Material changes — a new third party, or anything that starts collecting data that is not collected today — will be described here rather than quietly folded in.
This site is operated by [OPERATOR NAME] in [COUNTRY]. Questions about privacy go to [CONTACT EMAIL].