Privacy
Privacy Policy
Last updated: Nov 15, 2026
This policy explains how your personal data is processed when you use the HowClaude website (http://localhost:8080/) and mobile apps, in line with Article 13 of the EU General Data Protection Regulation (“GDPR”) and Article 10 of Turkey's Personal Data Protection Law No. 6698 (“KVKK”). In short: no account, no sign-up; your game progress stays on your device, our visit statistics are cookieless, and advertising cookies are only used for personalisation if you allow it.
1. Data controller
Your personal data is processed by the operator of the HowClaude service as data controller. You can reach us using the contact form. HowClaude is an independent educational guide, not affiliated with Anthropic; Anthropic is not the controller of any data processed on this site.
2. What we process and why
2.1 Cookieless visit statistics
To understand how the site is used, we keep anonymised statistics on our own server, without cookies: the page visited, time on page and scroll depth, the referring site's domain (without query parameters), campaign tags (utm), browser and operating system type, device type, screen size and the country derived from your IP address. Your IP address is not stored. To group page views within the same day, a one-way hash is computed from your IP address and browser details with a secret key that changes every day; it cannot be used to identify you and turns into a different value the next day. If your browser sends a Do Not Track/GPC signal and that option is enabled, nothing is recorded. Bots and prefetches are not counted.
Legal basis: legitimate interest in improving the service (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
2.2 Game progress (on your device only)
Your nickname, game language, chosen focus and experience level, XP, badges, streak and chapter progress are kept in your browser's local storage (localStorage, key howclaude.v1). This data is not sent to our servers; you can delete it at any time by clearing your browser data or with the “Reset progress” button in the game. The story content is also cached on your device so you can play offline.
Legal basis: necessary to provide the service you request (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) and “strictly necessary” storage under ePrivacy rules.
2.3 Anonymous gameplay statistics
To improve the game (for example, to see which question is too hard), the following events are sent together with a random identifier (UUID) generated on your device: session start, chapter start and completion, whether an answer was correct and the XP earned, badges earned, language changes, the focus you picked, shares and sponsored card/ad impressions and clicks; plus platform, app version and language. Your nickname and IP address are not attached to these records. The random identifier only represents the game on this device; a new one is created when you reset your progress or clear your browser data.
Legal basis: legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
2.4 Contact / feedback form
When you write to us, we store your name (optional), email address (optional), your message, language and platform, a keyed one-way hash of your IP address to prevent abuse, and your browser's user agent. Your message may also be forwarded to the administrator's mailbox so we can reply. We use this information only to handle and answer your request.
Legal basis: legitimate interest in answering you and steps at your request (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f)).
2.5 Security logs
To protect the site against abuse (spam, excessive requests), keyed hashes derived from IP addresses are kept in short-lived rate-limiting records, and errors are written to technical logs.
Legal basis: legitimate interest in information security and legal obligations (GDPR Art. 6(1)(c) and (f); KVKK Art. 5(2)(ç) and (f)).
3. Cookies and local storage
| Name | Type | Purpose | Duration |
|---|---|---|---|
howclaude.v1 | localStorage (necessary) | Game progress and random device identifier | Until you delete it |
howclaude.content.v1 | localStorage (necessary) | Offline copy of the story content | Until you delete it |
howclaude.events, howclaude.device | localStorage (necessary) | Queue of anonymous events not yet sent, device identifier | Until sent / deleted |
hc_consent | localStorage (necessary) | Remembers your cookie/advertising choice | 12 months |
hc_theme | localStorage (necessary) | Light/dark theme preference | Until you delete it |
hc_lang | First-party cookie (necessary) | Remembers your language | 12 months |
| Service worker cache | Browser cache (necessary) | Lets the game open offline | Until the next version |
Google cookies (e.g. __gads, __gpi, IDE) | Third party (consent-based) | Personalised advertising, measurement | Per Google's policies (usually up to 13 months) |
We ask for your consent for anything beyond strictly necessary storage. You can change or withdraw your choice at any time via the link at the bottom of every page.
4. Advertising (Google AdSense and AdMob)
To keep HowClaude free, ads from Google AdSense may be shown on the website and from Google AdMob in the mobile apps. The Google ad script is only loaded after you make a choice in the cookie banner. We use Google Consent Mode v2: all advertising and analytics permissions start as denied.
- If you choose “Accept all”, Google may use cookies and similar identifiers to show ads based on your interests and to measure them.
- If you choose “Only necessary”, ad storage is not permitted and only non-personalised ads are shown, selected by the page content and general location. Even then, Google may process limited data for purposes such as fraud prevention and frequency capping.
Learn how Google uses data: How Google uses information from sites that use its services, Google Privacy Policy. You can also turn off personalised ads in Google Ad Settings. In the mobile apps, use your device's advertising ID settings (iOS “Allow apps to request to track”, Android “Delete advertising ID”).
The site may also show our own sponsored cards, labelled “Sponsored”. They use no cookies; only total impressions and clicks are counted anonymously. Ads are never placed inside question cards.
5. Sharing and transfers
We do not sell your personal data. Data may be shared with the provider hosting the site, the email (SMTP) provider used to send messages and, if you allowed personalised ads, Google. Transfers to Google may involve countries outside Turkey and the EEA and rely on the safeguards provided by the GDPR and KVKK Art. 9 (standard contractual clauses) and, for advertising cookies, on your explicit consent. Data may be disclosed to competent public authorities where required by law.
6. Retention
- Cookieless visit statistics: up to 13 months (395 days), then deleted automatically.
- Anonymous gameplay statistics: up to 13 months, then deleted or kept only as aggregate counts.
- Feedback messages: up to 2 years after the request has been handled.
- Security and rate-limiting records: hours to a few days; technical logs up to 30 days.
- Game data on your device: until you delete it (we have no access to it).
7. Your rights
Under the GDPR you have the right to access, rectify and erase your data, to restrict processing, to data portability and to object; where processing is based on consent, you may withdraw it at any time; and you may lodge a complaint with your local data protection authority.
Under KVKK Art. 11 you also have the right to learn whether your data is processed and request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties it is transferred to in Turkey or abroad, to request correction, erasure or destruction, to request that these actions are notified to the recipients, to object to a result against you arising solely from automated analysis, and to claim compensation for damages caused by unlawful processing. You may also complain to the Turkish Personal Data Protection Board.
Send your requests using the contact form; we reply free of charge within 30 days at the latest. As we have no access to the game data on your device, only you can delete it; because anonymous statistics do not identify you, requests about them may require you to share your device identifier (found in the game's profile data).
8. Children
HowClaude is intended for a general audience and does not knowingly collect personal data from children under 13. The game requires no account; we ask users under 18 to use the contact form only with the knowledge of a parent or guardian.
9. Security
Connections are encrypted with HTTPS; a strict Content Security Policy is enforced, IP addresses are only kept as keyed hashes and the admin area is protected with two-factor authentication. No system is completely risk-free, but we take reasonable technical and organisational measures to protect your data.
10. Changes and contact
We may update this policy as the service or the law changes; the current version is always published on this page with its last updated date. Send your questions using the contact form.