Privacy policy

Who is responsible for your information

Jigsaway owns and operates Jigsaway.com and is responsible for the personal information described in this policy. On this page, “Jigsaway”, “we” and “us” refer to Jigsaway and its services.

Questions, requests and complaints about privacy can be sent to hello@jigsaway.com. We may ask for enough information to confirm your identity before acting on a request.

Information you provide

Account information may include your email address, username, display name, password hash, profile details and an identifier from Google if you choose Google sign-in. We never receive your Google password.

Uploads can include the image, title, description, technical file details and public-review choice you submit. Messages, room chat, reports, appeals and support requests contain the text and attachments you decide to send.

Information created when you use Jigsaway

We may record puzzle progress, selected piece count, finish time, move count, helper use, favorites, collections, room and event participation, friendships and leaderboard eligibility when those features need the information.

Security and delivery records may include an IP address, browser and device details, request time, page or endpoint requested, session activity and error information. Guest progress and basic preferences can remain in local browser storage instead of being attached to an account.

Why we use this information

We use account, play and upload information to provide the features you request, keep your session working, save progress, operate rooms, preserve historical event participation and results, publish approved uploads and show eligible public results. This processing is needed to provide the service you choose to use.

We use security, moderation and diagnostic information to prevent abuse, protect players, investigate faults and maintain the service. We rely on our legitimate interest in running a safe and reliable site, except where local law requires a different basis.

Optional advertising or measurement tools use consent where consent is required. Legal obligations may also require us to preserve or disclose limited records.

Cookies and local browser storage

Essential cookies and browser storage keep you signed in, protect requests, remember privacy choices and preserve guest progress or game settings. The site cannot provide every feature without these tools.

We use Google’s tag for analytics and ad measurement. In the EEA, the United Kingdom and Switzerland it sets no cookies until you choose “Accept all”; until then it only sends cookieless signals that Google uses to estimate overall traffic. Elsewhere it runs with measurement on. You can reopen Cookie settings from the footer and change that choice at any time.

With optional measurement enabled, we also collect page speed, interaction delay and layout stability measurements. These use broad page groups and mobile or desktop categories, not profile names, puzzle URLs or search terms. We keep these totals for up to 35 days. A temporary ID stops the same visit being counted twice and expires after 24 hours.

Emails we send

Account emails are part of using Jigsaway, so they always arrive: the welcome email, email confirmation, password resets, room invites and decisions about your uploads.

Puzzle update emails are optional. They show 10 of the puzzles added that week, the daily puzzle and a puzzle you left unfinished. They arrive once a week, on Saturday. In the EU, the EEA, the UK, Switzerland and Turkey we only send them after you say yes: the sign-up form asks with an unticked box, and if you join with Google we ask once after you arrive. Everywhere else they are on when you create an account. You can turn them off in account settings or with the link in any update email. Every update email has a one-click unsubscribe link. We record when and where you made this choice (sign-up form, settings or dashboard) and your country at that time.

When you create an account we store the country Cloudflare reports for your connection, as a two-letter code. We use it to show the right sign-up options and to understand where players come from. We do not store your IP address with your account.

Emails are sent through Brevo, our email delivery provider, which receives your email address, name and the content of each email. Brevo records whether an email was delivered and opened so we can spot emails that fail to arrive.

Uploads, public profiles and other public information

A public username, display name, profile photo, approved puzzle, leaderboard result or public activity can be seen by other people and may be indexed by search engines. Private uploads are limited to the account and authorized service operations unless you request public review.

Public uploads are reviewed before publication. We may remove, restrict or retain review records for content that presents a safety, copyright, fraud or abuse concern.

Service providers and legal disclosure

We use providers for infrastructure, file storage, email delivery, authentication, security, analytics and advertising. They receive only the information needed for their work and must handle it under their agreements with us.

We may disclose information when required by a valid legal process or when necessary to protect a person or the service. We may also disclose it as part of a business transfer subject to appropriate confidentiality and notice requirements.

International processing

Jigsaway and its providers may process information in countries other than the country where you live. Privacy rules can differ between those locations.

Where law requires a transfer safeguard, we use an approved transfer mechanism or another lawful protection. Contact us if you want more information about the safeguards relevant to your data.

How long information is kept

Account, profile, saved-play and collection information is generally kept while the account remains active. Session and verification records expire or become unusable according to their security purpose. Private uploads remain available until they are deleted or the account is closed, subject to backup and abuse-prevention needs.

Public puzzle records, scores and related history may be kept while they remain part of the public catalog or are needed to preserve a fair record. Security, moderation, audit, dispute and legal records are kept only for as long as reasonably necessary for the issue, applicable limitation period or legal duty.

Backups can retain deleted information for a limited period before normal rotation removes it. We may keep de-identified statistics that can no longer reasonably be linked to you.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete or receive a copy of personal information, object to or restrict certain processing and withdraw consent. Withdrawing consent does not make earlier lawful processing invalid.

You can delete your account yourself from Account & security. Deletion is scheduled 7 days ahead and you can cancel by signing in before then. After that, the account and its data are removed while finish times stay on leaderboards without your name.

You can edit available profile fields, keep optional cookies off and contact us for requests that are not available in the product. Some information may be retained where law permits or requires it, including records needed for security, fraud prevention, moderation, disputes or the rights of other people.

You may also complain to the data protection authority where you live or work. We would appreciate the chance to investigate the issue directly as well.

Children

Anyone can play Jigsaway without an account. Creating an account, uploading an image and using chat are for people aged 13 and over.

We do not knowingly collect personal information from children under 13. Guest play needs no email address, and guest progress stays in the browser.

If you are a parent or guardian and think your child under 13 has given us personal information, write to us through the contact page and we will delete it.

Security and policy changes

We use technical and organizational safeguards designed to protect personal information. No online service can guarantee absolute security, so please use a unique password and tell us promptly if you suspect account misuse.

We may update this policy when the service, providers or legal requirements change. The date on this page will change when we publish a material revision, and we will provide additional notice when it is appropriate.