Privacy policy

jigsawlab is a jigsaw puzzle site with no sign-up. We handle as little personal data as possible. Last updated 7 September 2026.

Photos

When you make a puzzle from your own photo, the photo is cut and drawn inside your browser only. It is never uploaded or stored. If you invite friends to a photo puzzle, the photo travels directly from your browser to theirs over WebRTC. Our server only relays the connection signals and never receives or stores the photo.

Stored in your browser

Best times, nickname and daily streak are kept in this browser's localStorage only. Clearing browser data removes them.

Google sign-in (optional)

Everything works without signing in. Sign in with Google only if you want your finished puzzles and boards in progress to follow you across devices. The only thing we request from Google is the account's unique number (OpenID sub); no email, name or profile photo. That number is stored only as a pseudonymous ID hashed with a server secret, so the stored value cannot be traced back to your Google account.

When signed in, the server stores: the pseudonymous ID, your nickname, finished records (painting key, piece count, time, placements, date) and the board state of puzzles in progress (paintings and daily puzzles only; photo puzzles are never synced). The session is kept in a signed cookie (jl_s, 180 days). You can sign out or delete your account together with all server records at any time from the My puzzles page; deletion takes effect immediately.

Puzzle rooms

When you create a room, the painting key, piece count, piece positions and player nicknames are kept on our server (Cloudflare Durable Objects) for up to 48 hours after the room ends, then deleted automatically.

Ads and affiliate links

Ads (Google AdSense) and affiliate links may appear. Ad providers may use cookies for personalised ads; purchases through affiliate links may earn us a commission.

Controller and contact

This site is operated by jigsawlab, run by one person, who is also the controller of the data described above. To ask about this policy, or to request access to, correction of, deletion of, or objection to the handling of your data, write to dev2lgb@gmail.com. If you are signed in you can also delete your account and every server record yourself, at any time, from the My puzzles page.