Privacy
What this site knows about you
Nothing leaves your browser but the pages you asked for and a count of them. There are no accounts, no ad networks and no server holding your games — and the honest consequence is that nobody here can restore your streak either.
What is stored, and where
All of it goes to your browser's local storage under keys beginning q.v1., on the device you are reading this on. None of it is transmitted.
| What | Key | Why it exists |
|---|---|---|
| Settings | q.v1.settings | Theme, high-contrast colours, the timer, and the two auto-mark toggles. |
| Statistics | q.v1.stats | Games played and solved, broken down by board size. |
| Streak | q.v1.streak | Current and longest, plus the last day you finished. |
| A board in progress | q.v1.run.{mode}.{day} | Your marks, the clock and the hints used, so a refresh does not cost you the board. |
| Device id | q.v1.identity | A random string minted in your browser. It has never been sent anywhere; it exists so that if accounts ever arrive, the results you earned before signing up can be claimed rather than lost. |
| Finished games | q.v1.outbox | A queue waiting for a server that does not exist yet. Nothing drains it today. |
| Your analytics switch | q.v1.consent | Written only when you turn analytics off, and read before the tag loads on every page. |
Local storage is per-browser and per-device, so playing on a phone and a laptop gives you two separate sets of everything. Clearing your browsing data deletes the lot permanently — there is no copy to restore from.
Analytics
Google Analytics 4 loads on every page and records page views with IP anonymisation on. It is there to answer one question — which puzzles and pages people actually play — and it is not wired to anything that identifies a person. There is no consent prompt: counting only the visitors who stop to click “Allow” measures who is willing to be measured, which is a different question than the one being asked.
You can switch it off here. The page reloads without the tag, and it stays off on this device until you turn it back on:
Analytics
Checking…
Everything stored on this device
Settings, statistics, streak, any board in progress and the anonymous device id. There is no server copy, so this cannot be undone.
The controls for these need JavaScript. Without it, clearing this site's data in your browser settings does the same job.
Cookies
This site sets none of its own. Your settings and progress use local storage, which is not sent with requests the way a cookie is. Google Analytics does set its own _ga cookies — turning analytics off above expires them as well as stopping the script, so the visitor id does not survive to be recognised later.
What actually leaves your browser
- Requests for the pages themselves, and for the puzzle files under
/puzzles/. Cloudflare logs the usual request metadata to serve them and to absorb attacks. - Analytics page views, unless you turned them off above.
- Nothing else. Fonts, icons and every board are served from this domain, so no third party learns you were here, and there are no embedded players or comment systems to do it on their behalf.
- The buttons that post a result to X, Reddit, WhatsApp and the rest are plain links, not the networks' own widgets: no code of theirs runs here, so none of them knows you played until you click one. Clicking sends what you chose to post, and the links withhold the referrer, so the network is not told which page you came from either.
If you email us
The address on the feedback page is a mailbox with a person behind it. Your address is used to reply and for nothing else — there is no mailing list, and reports are not merged with anything else, because there is nothing else to merge them with.
Your rights over all this
The usual data rights — access, correction, erasure, portability — assume a company holding a copy of your data. There is no copy: everything above is on your own machine. So access means opening your browser's storage inspector, erasure is the button above, and there is nothing to port out of a server that has never seen it. If cloud saves ever ship, this section stops being a technicality and gets a real process before the feature is switched on.
What we do not do
- No advertising and no ad networks.
- No accounts, so no email addresses and no passwords.
- No fingerprinting, no cross-site tracking, no third-party embeds or social widgets.
- No selling or sharing of data, because there is none to sell.
Hosting
The site is served by Cloudflare, which processes request metadata such as IP address and user agent to deliver pages and absorb attacks. That is standard for any website and is covered by Cloudflare's own privacy terms.
If this changes
Cloud saves and leaderboards are planned. If they ship, this page will say exactly what gets stored server-side before the feature is switched on — not after — and the date below will move.
Last updated August 20, 2026.