Data & privacy
What this release stores, what becomes public, and the controls you can use.
Updated November 7, 2026
Playing without an account
You can play games, use solvers and make puzzles without registering. A first-party session cookie lets the server recognize your guest session. Your browser also keeps attempt identifiers and unfinished entries in local storage so you can resume. Clearing cookies or local storage can remove access to guest progress and projects.
Accounts and public scores
An account stores your username, public nickname, password hash and recovery-code hash. This release does not ask for an email address or send account email. Game attempts include puzzle editions, accepted actions, timing, assistance and results. Only the nickname and counted score information are shown on public leaderboards. Use a nickname rather than a real name or contact address.
Solvers and private projects
Solver inputs are processed by this server to return matches from the stated reference data. They are not saved as a solver-search history. Generated puzzle banks, clues, layouts and matching keys are saved as private projects tied to your guest session or account. Signing in alone does not transfer guest records; use Save this device’s progress to attach them.
Cookies, hosting and request records
This release uses first-party session and form-security cookies. Its pages and assets are served by this site without third-party advertising scripts, analytics tags or remote fonts. The hosting server processes IP addresses, requested paths, timestamps and request outcomes for delivery and operations. Abuse throttles store keyed hashes of the request address with expiry times. The site is hosted on a Linode server; domain registration and DNS are managed through GoDaddy.
Feedback and owner review
The contact form saves your message, the page you identify and, when signed in, your account reference for the site owner to review. It is not a live chat or an email delivery system. Do not submit passwords, recovery codes or other sensitive information. Staff can review reports, correct content and record score-review decisions.
Your account controls
Your account page lets you export saved progress and projects, change your public nickname or password, replace the private recovery code, sign out, or delete the account after entering its password and confirmation. Account deletion removes the live account, associated attempts and owned projects. Feedback can remain without its account link. Operational logs and previously created server backups are separate records and are not removed immediately by the account-delete button.
Questions and changes
Use Contact & corrections to ask the site owner about data or report an issue. This notice describes the current release. New advertising, analytics, email or sharing features would need corresponding changes to the implementation and this notice before they are introduced.