Privacy policy

01Who we are

Jigsaw Diary is run by an individual based in Spain, who is responsible for your data. For anything about your data, email thejigsawdiary@gmail.com.

02What we collect

Your account: email address, and your password (stored hashed — we never see it). If you sign in with Google, we get your email and name from Google.

Your profile: username, bio and avatar, and whether your profile is public.

What you log: puzzles, photos you upload, statuses, completion dates and puzzling sessions.

Technical logs: our hosting providers keep standard server logs (IP address, browser, pages requested) for a short time, for security and to fix errors.

03Why we use it

Only to run the app for you: let you sign in, keep your collection and stats, and show your public profile when you choose to share it. The legal basis is the contract between us when you create an account (GDPR art. 6.1.b).

If you haven’t opened the app for a week, we may email you news from the community (what others finished, applause on your puzzles). At most once a week; turn it off in Settings or with the link in each email.

We also count anonymous totals (how many people sign up, add a puzzle, log a session) to know whether the app is useful. These counts don't identify anyone.

We don't sell your data, we don't show ads, and we don't use advertising or analytics cookies.

04Public profiles

Profiles are public by default: anyone with the link can see your username, bio, avatar, completed puzzles and stats, and other users can find you by your username. You can hide your profile at any time in Settings; then only you see it.

Each puzzle also has a public page that brings together everyone who has it: it shows the username, photo and country flag of public profiles that finished it or are building it, plus an anonymous count of how many people have it on their wishlist (never who).

05Who processes it for us

Supabase (database, sign-in and photo storage), Vercel (hosting), Resend (sending our emails) and Cloudflare Turnstile (checking that sign-ins come from people, not bots). If you use Google sign-in, Google handles that step. These providers only process data on our behalf and under data processing agreements; where data leaves the EU, it's covered by the EU Standard Contractual Clauses.

If you turn on notifications, your browser’s push service (Google, Apple or Mozilla, depending on the browser) delivers them. It only gets the text of each notification.

Some puzzle pages show a link to search for that puzzle on Amazon. We're an Amazon Associate and earn from qualifying purchases. We don't send Amazon any of your data; if you click, Amazon's own privacy policy applies on their site.

06Cookies

We only use the cookies needed to keep you signed in. They're strictly necessary, so we don't ask for consent. The app also stores some files on your device so it works offline.

07How long we keep it

Until you delete your account. Then your profile, puzzles, sessions and photos are deleted straight away. Backups held by our providers expire within a few days.

08Your rights

You can access, correct, export or delete your data, and object to or restrict how it's used. Most of it you can edit in the app; for anything else, email thejigsawdiary@gmail.com.

To delete your account: Settings → Delete my account. If you can't sign in, email thejigsawdiary@gmail.com from your account's address and we'll delete it.

If you think we've handled your data wrongly, you can complain to the Spanish data protection authority (aepd.es).

09Children

Jigsaw Diary is not meant for children under 14. If you're under 14, please don't create an account.

10Changes

If we change this policy in a way that matters, we'll tell you in the app before it applies.