Privacy policy

Short version: we have no accounts of our own and we store nothing that identifies you. Your game progress stays on your device. Only if you choose “Continue with Google”, so that your phone and computer share it, is a copy kept on our server under an anonymous key. We never store your email address, name or picture.

What is stored in your browser

We use your browser's local storage (keys starting with “pz:”) for your settings, the puzzles you are playing, your results, statistics, streaks and stickers. This data does not leave your device unless you choose to continue on your other devices (below). You can delete it at any time from My stats → Reset everything, or by clearing site data in your browser.

Anonymous counts

To learn which puzzles people enjoy and whether the site works, the site may send anonymous counting events to our own server: a puzzle was opened, a game was finished (with the result and a time range), a share button was pressed, the app was installed, how many days it has been since you first played (as a range, so we can see whether people come back), and the broad kind of referrer (search, social, direct). When you win a daily puzzle, the page also asks our server for your place in today's count (“you were #N today”). These requests contain no cookie and no identifier, and no IP address is stored; they only increase daily totals.

Continuing on your other devices

Nothing leaves your device unless you choose to continue on other devices. A device that was never linked sends nothing to our server, not even a request. If you press “Continue with Google” (Settings → Link your devices), the random key this device makes at that moment, and your puzzle records, settings, unfinished boards and stickers, are stored on our server (Cloudflare Workers with a D1 database) so that your phone and computer can share them. The server keeps only a hash of the key, not the key itself. No name, email address, location, IP address or device information is stored, and no cookies are used. “Reset everything” in My stats deletes the records on every device you continue with. Records under a key that has not been used for over a year are deleted automatically.

Continue with Google. The button loads Google’s sign-in script only when you press it; before that, no Google code runs on our pages. Google then asks you to choose an account and hands our page a signed proof of sign-in. We pass it to our server, which checks it (signature, our app, expiry) and uses one thing from it: Google’s number for your account. We store that number only as a hash mixed with a secret that lives on our server, so it cannot be turned back into your account. The proof also contains your email address, name and picture; our server does not read, store or log them, we ask for no further permissions, and we get no access to your Google account, contacts or files. The same account on another device gets the same key, and so the same records. How Google itself handles your sign-in is described in Google’s privacy policy.

Leaving and deleting. In Settings → Link your devices, “Log out on this device” stops syncing on that device only; its records stay there. “Delete my records on the server” deletes everything we keep for you on our server (your records and the link to your Google account) right away; the records on your devices stay, but they stop following each other, and your other devices are told that the link has ended. If you want to be sure, you can also write to [email protected].

Advertising

When advertising is switched on, ads are served by Google AdSense. Google and its partners may use cookies or similar technologies to show and measure ads, and, where allowed, to personalize them. Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent through a Google-certified consent tool before any such cookie is used. You can learn more at https://policies.google.com/technologies/ads and manage ad personalization at https://adssettings.google.com.

Analytics

If enabled, we use Cloudflare Web Analytics, which does not use cookies and does not track you across sites. Our hosting provider, Cloudflare, processes technical request data (such as IP addresses) to deliver and protect the site. Cloudflare and Google process data in several countries, including the United States, under their own privacy terms and data-transfer safeguards.

Retention

Anonymous daily totals are kept indefinitely because they contain no personal information. Data in your browser stays until you delete it.

Children

This is a puzzle site for a general audience. It is not directed at children under 13, and we do not knowingly collect personal information from children.

Contact

Questions about privacy: [email protected]. You can also ask us about, or ask us to delete, data we hold about you. If this policy changes, the date below changes too.

Last updated: 2026-10-19