PRIVACY POLICY
Last updated October 25, 2026
Information stored in your browser
Paizzle uses browser storage rather than cookies for game features. Saved game state stays in the browser where you play and is not synced to a Paizzle account.
Local storage persists across browser restarts until you clear this site’s data or the application removes an entry. The following is saved in your browser:
- Puzzle progress, timer state, game-attempt IDs, completed times and move counts, and replay scores.
- Display and sharing preferences.
- Co-op rejoin information, including a session code, player ID and access token. Treat this browser data as a credential for rejoining a live co-op session.
Analytics stored on the server
The app sends events for game starts, completions, leaving or sharing a game, and co-op actions.
Analytics events are stored in PostgreSQL.
An event row contains a server-generated timestamp, its event type and random event ID, an optional game-attempt ID, and a payload. Depending on the event, the payload can include the game, puzzle date, difficulty, whether it was today’s or an archived puzzle, elapsed time, move count, landing path, browser referrer or co-op code.
To group related events, the API computes a 128-bit HMAC-SHA-256 fingerprint using the request IP address, user-agent and Accept-Language header, with a private server secret. The fingerprint is stored with each event. The raw IP, user-agent and language values are not stored in the analytics event row. The fingerprint is stable for matching inputs and can link events; it is pseudonymous, not anonymous.
Game-attempt IDs are random UUIDs generated by the browser and stored with timer state in local storage. They are sent with related events so one attempt can be understood as a sequence.
Server and hosting logs
The production API has structured logging enabled and writes logs to standard output. The application does not write a separate log file or set a log-expiration period. The logs are kept until a new version of the API is released.
Cloudflare currently handles delivery and proxying for the site and API. It receives network and request information needed to route, secure and operate those services. See Cloudflare’s privacy information for its handling and retention practices.
Your choices and requests
You can remove puzzle data and co-op credentials from your device by clearing Paizzle’s site data in your browser.
To ask a question or request help with data, email [email protected].