This policy explains what personal data Jigsy collects when you play our daily puzzles, create an account, or appear on our leaderboards. It also explains your rights under UK data protection law and how to exercise them.
Jigsy is operated by Chris Dawson ("we", "us", "our"). We are the data controller for all personal data described in this policy.
1. What data we collect
We collect different data depending on whether you play as a guest or create an account.
| Data | When collected | Stored where |
|---|---|---|
| Email address | Account creation (optional) | Firebase Authentication |
| Display name | Account creation; auto-generated then customisable | Firestore + leaderboards |
| Anonymous puzzle user ID | First visit, stored in your browser | Your device (localStorage) + Firestore |
| Firebase Auth UID | Account creation | Firebase Authentication + Firestore |
| Puzzle completion data | Each time you finish a puzzle | Firestore |
| Hints used per puzzle | When a hint is requested | Firestore (with completion record) |
| Time taken per puzzle | On puzzle completion | Firestore (with completion record) |
| Star and difficulty ratings | When you submit a rating after completing a puzzle | Firestore |
| Give-up / abort data | When you choose to give up on a puzzle | Firestore (separate abort collection) |
| Streak data | Maintained across days as you play | Your device (localStorage) + Firestore |
| Score and leaderboard data | On puzzle completion | Firestore (weekly + all-time) |
| IP address and device data | All visits | Firebase infrastructure (Google) |
If you play without creating an account, we collect only an anonymous puzzle user ID (stored in your browser), your puzzle completion and rating data tied to that ID, and basic device and IP information handled by our hosting infrastructure.
2. How we use your data
We use the data described above for the following purposes:
Providing the game. Puzzle completion data, streak data, and scores are used to power your account, track your progress, and prevent duplicate completions within the same day.
Leaderboards. Your display name and weekly and all-time scores are shown on the public leaderboard. Puzzle completion counts and scores are aggregated to produce leaderboard rankings.
Improving puzzle difficulty. Aggregate, anonymised completion times, hint usage, move counts, and star ratings are used to analyse and calibrate the difficulty of puzzle generation. We look at correlations across the player base – not at any individual's data – to inform how the generator is tuned.
Account management. Your email address is used to authenticate your account and allow you to sign in across devices. We send a one-time verification email when you create your account.
Marketing updates. If you opt in during sign-up, we may occasionally send you news and updates about Jigsy by email. You can withdraw this consent at any time by emailing privacy@jigsy.app. We will never send marketing email without your explicit consent.
Security and abuse prevention. IP address and device data are retained by our infrastructure provider in accordance with their own policies, and may be used to detect and prevent abuse.
3. Our legal basis
Under UK GDPR, we rely on the following legal bases:
Contract performance – we process your account data (email, display name, Auth UID) in order to provide the account-based features you signed up for.
Legitimate interests – we process puzzle completion data, scores, streak data, and ratings in order to run the game, maintain leaderboards, and improve puzzle quality. Our legitimate interest is in operating and improving Jigsy. We have assessed that this processing does not override your interests or rights.
Consent – if you opt in to marketing emails at sign-up, we process your email address for that purpose on the basis of your freely given consent. You may withdraw consent at any time.
Legal obligation – we may need to process or retain data to comply with legal requirements.
For guest (non-account) players, our legal basis for assigning and storing an anonymous user ID is legitimate interests – specifically, preventing duplicate completions and maintaining basic game integrity.
4. Local storage and device data
Jigsy uses your browser's local storage (not cookies) to remember game state between sessions. We do not set traditional HTTP cookies for tracking or advertising purposes. Local storage is stored exclusively on your device and is not transmitted except as part of normal game operation.
Data stored locally includes:
Your anonymous puzzle user ID, today's puzzle progress for each difficulty (Classic, Pro, Extreme), your weekly dot progress (which puzzles you completed this week), your current streak and last completion date, and your scores for the current day.
This data is tied to the specific browser and device you are using. Clearing your browser data will remove it. If you sign in to an account, your authoritative data is held in Firestore and is not lost if you clear local storage.
5. Leaderboards and public data
If you have an account, your display name and score appear on the weekly leaderboard. The leaderboard is publicly visible to anyone who visits Jigsy – you do not need to be signed in to view it.
Your display name is auto-generated when you create an account and can be changed at any time from your account settings. If you are concerned about your display name being associated with you personally, you can change it to something that does not identify you before scores are posted.
Guest players (no account) do not appear on the leaderboard.
6. Third-party processors
We use the following third-party services, each of which processes some of the data described in this policy on our behalf:
Google Firebase (Google LLC / Google Cloud EMEA Limited) – provides our authentication service, database (Firestore), and cloud functions infrastructure. Firebase processes your account data, puzzle data, and scores. Google's Data Processing Agreement applies. Data may be stored in data centres within the European Economic Area or the United States under Standard Contractual Clauses. For more information, see firebase.google.com/support/privacy.
Google Fonts – we load a typeface from Google Fonts, which makes a network request to Google's servers when you visit the site. Google may log your IP address as part of this. For more information, see developers.google.com/fonts/faq/privacy.
Mailchimp (The Rocket Science Group LLC) – if you subscribe to Jigsy updates via the email sign-up form on our homepage, your email address is stored and processed by Mailchimp. This is separate from the in-game account system. Mailchimp is based in the US; data is transferred under Standard Contractual Clauses. For more information, see mailchimp.com/legal/privacy.
Brevo (Sendinblue SAS) – we use Brevo to send transactional emails, including account verification emails. When you create an account, your email address and display name are passed to Brevo solely for the purpose of sending you the verification email. Brevo is based in France and processes data within the EU. For more information, see brevo.com/legal/privacypolicy.
We do not share your personal data with any other third parties, and we do not sell personal data.
7. How long we keep your data
Account data (email, display name, Auth UID) is retained for as long as your account exists. When you delete your account, this data is deleted immediately and permanently.
Puzzle completion and abort records are retained for up to 2 years. We use rolling aggregates from this data to inform difficulty calibration; older individual records are no longer needed for this purpose.
Leaderboard data (weekly entries) is retained for 12 weeks after the relevant week ends. All-time score totals stored on your user record are deleted when your account is deleted.
Local storage data on your device is cleared automatically when you clear your browser data, or when our game determines it is stale (for example, day-specific puzzle progress is discarded after midnight).
Infrastructure logs (IP address, device data held by Firebase/Google) are subject to Google's own retention policy, which is typically 30–90 days for server logs.
8. Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
You can request a copy of the personal data we hold about you.
You can correct inaccurate data, including by updating your display name in-app.
You can ask us to delete your data. Account deletion removes your data from our systems.
You can ask us to pause processing of your data in certain circumstances.
You can request your personal data in a structured, machine-readable format.
You can object to processing based on legitimate interests, including leaderboard visibility.
To exercise any of these rights, contact us at privacy@jigsy.app. We will respond within one calendar month. If your request is complex or there are a large number of requests, we may take up to three months in total – and will let you know within the first month if this is the case.
We will ask you to verify your identity before fulfilling a request relating to personal data.
9. How to delete your account
You can delete your Jigsy account and all associated personal data at any time. Deletion is permanent and cannot be undone.
- Open the Jigsy daily puzzle at jigsy.app/daily and sign in to your account.
- Tap your profile icon to open the account panel.
- Scroll to the bottom of the account panel and tap Delete account.
- Confirm deletion when prompted. Your account, all puzzle records, leaderboard entries, and stored scores will be permanently deleted.
Deletion is immediate and cannot be undone. If you change your mind, contact us at privacy@jigsy.app as soon as possible – we cannot guarantee restoration once deletion has been processed.
If you are unable to access the in-app deletion option, you can request deletion by emailing privacy@jigsy.app from the address associated with your account.
Guest players (no account) – if you have never created an account, the data we hold is anonymous. Your anonymous user ID exists only in your browser's local storage. To remove it entirely, clear your browser's local storage for jigsy.app. There is no server-side account to delete.
10. Contact and complaints
If you have any questions about this privacy policy or how we handle your personal data, please contact us:
Email: privacy@jigsy.app
Controller: Chris Dawson, operating Jigsy
If you are not satisfied with our response, you have the right to lodge a complaint with the UK's data protection supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
We will always try to resolve any concern directly before you need to escalate it to the ICO, so please contact us first.
This policy was last updated on 1 June 2026. We may update it from time to time. If we make material changes, we will note the update date above. Continued use of Jigsy after changes are posted constitutes acceptance of the updated policy.