Privacy Policy

Last updated: September 24, 2026

Puzzle Temple ("we", "us") runs the Sudoku, Climb Sudoku, and Jigsaw games at this site. This page explains what we collect, why, and what control you have over it. We've written it in plain language rather than dense legal text - if anything is unclear, email us at contact@puzzletemple.com and we'll clarify or fix it.

What we collect

If you create an account: a username, an email address, and a password (stored as a one-way cryptographic hash - we never store or can see your actual password).
If you play as a guest (no account): a randomly generated device identifier stored in a cookie on your own device, so a room you're in still recognizes you if you reload the page. No name or email is required or collected for guest play.
Gameplay data: Sudoku/Climb Sudoku scores and completion times (if you have an account and choose to submit them to a leaderboard), and the puzzle rooms you create or join (room codes, chosen difficulty, and - if you upload one - the image used for a Jigsaw puzzle).
Basic technical data, briefly: your IP address is used transiently, in server memory only, to apply rate limits that prevent abuse (e.g. limiting login attempts) - it is not written to our database or kept once that check is done.

Cookies

We use a small number of cookies, all functional (no advertising or tracking cookies):

access_token - keeps you signed in. HttpOnly, so it can't be read by page scripts.
XSRF-TOKEN - a security token that prevents other websites from making requests on your behalf.
device_id - only set for guest play, so a guest identity survives a page reload.

Why we process this data

To provide the game itself (an account system and multiplayer rooms don't work without an identity and some server-side state), to keep the service secure (rate limiting, breached-password checks at signup), and, for leaderboard scores, because you've chosen to submit them. We don't sell data, and we don't use it for advertising.

Where it's stored, and for how long

Data is stored on servers located in the EU. Account data is kept for as long as your account exists; if you delete your account, we delete the associated personal data (username, email, password hash) within a reasonable time, except where we're required to keep something longer for a legal reason.

If we send you email (e.g. to verify your address or for a password reset), that email is sent through a third-party transactional email provider, which processes your email address only to deliver that message.

Your rights

Under data protection law (including the EU/UK GDPR, for visitors it applies to), you have the right to:

Access the personal data we hold about you.
Correct it, if it's inaccurate (most of this you can already do yourself from your profile settings).
Delete it ("right to erasure").
Export it in a portable format ("data portability").
Object to or restrict certain processing.

To exercise any of these, email contact@puzzletemple.com from the address on your account. We'll respond within a reasonable time.

Children

This service isn't directed at children under 13, and we don't knowingly collect personal data from them.

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page.

A note on this document

This policy is written in good faith to accurately describe a small, independently run service, but it isn't a substitute for legal advice. If you have specific legal concerns, please consult a qualified professional.