privacy

We don't ask for your name, email, or any identifier. Two pieces of state live in your browser's localStorage so the site is useful between visits:

• inwhatorder-progress — which items you've checked off across all franchises.
• iwo-section-collapsed — which sections you've collapsed on franchise pages.

We can't read this from our servers. Clearing your browser data for this site resets it.

We serve display ads via Google AdSense. AdSense and its advertisers may set cookies (and read similar identifiers, e.g. the Google Advertising ID on mobile) in order to:

• show you ads, including personalised ads where you've consented;
• limit how often you see the same ad;
• measure ad performance for advertisers;
• detect and prevent fraudulent clicks.

If you're in the EEA, UK, Switzerland, or another region where consent is legally required, a consent banner (Google's “Funding Choices”) appears on your first visit. You can accept, reject, or customise it; if you reject personalised ads, AdSense serves non-personalised contextual ads based only on the content of the page you're looking at, not your browsing history.

We use Umamifor privacy-friendly analytics — it counts page visits without cookies, without cross-site tracking, and without storing any personal identifiers. We don't use Google Analytics, Meta pixels, or any other tracker that profiles individuals.

• Google AdSense — ad delivery. See Google's Advertising and Privacy page and Privacy Policy.
• Funding Choices(a Google product) — consent management for AdSense.
• Umami— cookieless analytics. Counts page visits and aggregates anonymous browser / country signals derived from the request; doesn't store anything that identifies you personally. See Umami's privacy FAQ.
• Vercel— hosting. Vercel automatically logs request data (IP address, user agent, response status) for security and performance. See Vercel's Privacy Policy.

• Opt out of personalised ads— use the consent banner, or visit Google's Ad Settings.
• Browser controls— most browsers let you block third-party cookies or clear site data. AdSense respects the Global Privacy Control (GPC) signal where required by law.
• Clear your progress— clear this site's data in your browser settings to remove inwhatorder-progress and iwo-section-collapsed.

We rely on your consent (GDPR Art. 6(1)(a) / UK GDPR / Swiss nFADP) for personalised advertising. If you withdraw consent we'll serve non-personalised ads instead. Vercel processes request logs under legitimate interests for security (GDPR Art. 6(1)(f)).

We don't sell personal information for money. Sharing for cross-context behavioural advertising can occur through AdSense when you've consented to personalised ads. You can opt out via the consent banner or by enabling Global Privacy Control in your browser.

This site isn't directed at children under 13 (or under 16 in the EEA / UK). We don't knowingly collect data from children. If you believe a child has interacted with the site in a way that requires action, contact us below.

We may update this policy. The “last updated” date at the top reflects the most recent change. Material changes will be flagged on the homepage for at least 14 days.

For privacy questions, opt-out requests, or anything in this policy: [email protected].