Privacy policy
What we store
- Without an account: your puzzles in progress, play history, and settings live only in your browser's local storage. Nothing identifies you.
- With an account: your email address, display name, solve history, puzzles in progress, and your consent decisions (with the policy version, the IP address the decision was made from, and the time of each decision).
- When you request a sign-in link: the server processes your email address and IP address to send the link and to rate-limit abuse. If an email to your address hard-bounces or is marked as spam, the address goes on a do-not-send list so we stop emailing it.
Why we process it
Account and sign-in data is processed because it is necessary to provide the service you asked for. Puzzle emails are sent only on your explicit, separate opt-in consent — an account is never itself consent to marketing.
Cookies
One strictly-necessary session cookie keeps you signed in. There are no analytics, advertising, or third-party cookies, and no tracking of any kind.
Sign-in links are sent to the address you give us. Puzzle emails are sent only if you opt in, and every consent can be revoked on your profile page at any time.
Email is delivered through Resend (Plus Five Five, Inc.), a US-based email provider: your address and the message content pass through their systems to reach you. Our emails carry no open-tracking pixels and no rewritten tracking links.
Your data
See the data retention page for how long data is kept. For questions or data requests, contact [email protected].