Privacy

Last updated 13 October 2026

Who is responsible

TopJigsaw is made by Hafu Design Inc., which decides how the data described here is used (the “controller” under European and UK data protection law). To ask about your data, or to use any of the rights below, email privacy@topjigsaw.com, or use Send feedback in the ☰ menu on the TopJigsaw home screen and add an email address if you’d like a reply.

What stays on your device

• Your puzzles. Puzzles in progress (the picture, where every piece is, your time) and the list of pictures you’ve finished are kept in your browser’s storage so you can pick up where you left off.
• Photos you upload. A puzzle made from your own photo is cut on your device and stored only there. It is never uploaded to TopJigsaw.
• Settings. Table colour, sound, drawing, the name and colour you use at shared tables, whether you’ve agreed to the sharing rules, which tips you’ve closed, and your privacy choice.

This is browser storage, only there because you use those features. Clearing this site’s data in your browser, or deleting a puzzle from Continue, removes it. TopJigsaw can’t see or restore any of it. Every item is listed under What your browser stores.

What is sent when you finish a puzzle

When you finish a picture from the TopJigsaw collection or a picture search, your browser sends which picture it was, how many pieces, how long it took, and whether Mystery was on. That’s used to show how many times each picture has been finished. It carries no name, account or device identifier, and your address isn’t stored with it (a scrambled form of it is kept for a day, separately, only to stop spam). Puzzles made from your own photos are never counted.

If you tap thumbs up or down on the finished card, your browser sends that vote with the picture, the piece count, whether Mystery was on and how many people played. So that you can change your mind, it also sends a random code your browser made up (your “device code”), which we only store scrambled (hashed), and scrambled differently from the copy used for visit statistics, so a vote can’t be matched to your visits. It isn’t linked to a name or account, and it’s used only to see which pictures players like. A scrambled form of your internet address is kept with the vote for 48 hours to stop spam, then cleared. Votes are kept until you delete them: tap your vote again, or use Delete my data below.

Shared tables

• When you play with friends, piece moves, your chosen name and colour, stickers and drawings are relayed between the players at that table through Supabase’s realtime service. Nothing is kept once the messages are delivered.
• Open tables. While the Open tables row is on the home screen, your browser connects to the same realtime service to receive the list of public tables, before you tap anything. Each public table shows the picture, its progress, and the names and colours of the players there to everyone looking at the home screen, including yours if you open or join a public table. Private tables are never listed.
• A photo you share from your own device is encrypted end to end between players; the relay only handles scrambled data it can’t read. See the Terms for how shared photos work.
• If you report a shared photo, the report holds the table code, the reason you picked, and a scrambled (salted, one-way hashed) form of your internet address used only to stop report spam, cleared after 48 hours. Never the photo.

Feedback you send

If you use Send feedback, your message, the two topics you picked, the app version, a rough device line (such as “iPad · Safari”) and your screen size are stored so the message can be read and acted on. An email address is stored only if you type one, and is used only to reply to you. A scrambled (salted, one-way hashed) form of your internet address is kept for 48 hours to stop spam, then cleared. Ask for a message to be deleted by replying to any answer you get, or by sending feedback that says so.

Visit statistics (only if you allow them)

The first time you open TopJigsaw a privacy banner asks whether it may count visits. Nothing in this section is collected unless you tap Allow all, or switch Analytics on under Customize (the switches start off) and tap Allow selection, and you can change your mind at any time, with the switches below or from Privacy choices in the ☰ menu. If your browser sends Global Privacy Control or Do Not Track, TopJigsaw treats that as “no” and doesn’t ask. If you say no, or later switch statistics off, none of this is sent and the visit markers TopJigsaw kept for it are removed from your device.

Once a day, when you open TopJigsaw, your browser sends your scrambled device code with the date, so we can count how many players are new and how many come back. Nothing else is sent with it, and these daily records are deleted after 13 months.

TopJigsaw counts visits with Vercel Web Analytics, which uses no cookies and doesn’t follow you to other sites. It records things like the page visited, the referring site, the country, and the kind of device and browser, only in aggregate. It also receives every game event in the next paragraph (including the words you search with, which picture you started, and error messages), without the device code, names, or anything that follows you to other sites.

TopJigsaw keeps the same kind of game events itself, so it can see what works and fix what doesn’t. Each is stored with the scrambled code from above and the time. They are: the start of a visit (the kind of page you arrived on, the name of the site that sent you, such as “google.com”, but never the page on it, any campaign tags in the link, the country you’re in, worked out from your address, which itself isn’t kept, whether you’re on a phone, tablet or computer, whether TopJigsaw is installed as an app, and your browser’s language, such as “en”, without the region); how long you actively spent on the site, counted in seconds while the page is in front and you’re using it; where on the home screen you picked a puzzle, its piece count and style, and which collection or search picture it was (never a photo of your own); finishes, with the same picture; invites, joins and join codes typed, with the name you chose for playing with friends (so we can tell how often the same people come back to play together); shares; the words you search for pictures with, how many came back, whether you typed them or tapped a suggestion, and whether you started a puzzle from the results; which categories and topics you open; and error messages if something breaks. No other names, no photos or picture titles, and nothing that follows you to other sites. The name only reaches TopJigsaw’s own records, never Vercel.

For the first 48 hours each event is also stored with a scrambled (salted, one-way hashed) form of your internet address, used only to stop spam and to tell when several new visits come from one network; after that it is cleared. The events themselves are deleted after 13 months.

Our ads

TopJigsaw shows no ads. We do sometimes advertise TopJigsaw on Google. If you arrive by clicking one of those ads, the privacy banner asks about it separately; only if you agree (Allow all, or the Ads switch) does your browser load Google’s ad-measurement tag (Google Ads), which sets Google cookies (_gcl_au and other _gcl_…, _ga…, _gid and _gac_… cookies) so we can tell whether the ad led to a visit and a finished puzzle: when you finish one, the tag tells Google that the ad click “converted”. That is conversion measurement: Google learns that someone who clicked our ad came and played. It isn’t used to show you ads elsewhere (ad personalisation is switched off). After a yes, your browser remembers for 30 days that you came from an ad, so this also works if you come back later. Say no, or switch it off later, and the tag isn’t loaded again and its cookies are deleted from this site. Everyone else never loads the tag, and no Google cookies are set. Google’s handling of that data is covered by Google’s privacy policy.

What your browser stores

Everything TopJigsaw keeps in your browser (local storage, session storage and IndexedDB), by why it’s there. Nothing here is sent anywhere unless a section above says so.

Needed for the game to work

• puzzleboii (IndexedDB): puzzles in progress with their pictures, the pictures you’ve finished, and your finishes for Stats.
• topjigsaw-consent: your privacy choices, the date of the notice you answered, and when.
• topjigsaw-share-agreed, topjigsaw-reported, topjigsaw-kicked-rooms: that you agreed to the sharing rules, and tables you reported or were removed from.
• topjigsaw-client-id (session storage): tells your own tabs apart at a shared table.
• puzzleboii-update-resume, puzzleboii-chunk-reload, puzzleboii-rescued: short-lived markers that reopen your puzzle after an update.
• topjigsaw-device: your device code, made the first time you vote (and used for statistics only if you allow them); topjigsaw-votes: your own votes, so the finish card shows them again.

Your settings

• puzzleboii-table-color, puzzleboii-sound, puzzleboii-sound-volume: table colour and sound.
• topjigsaw-player-name, topjigsaw-player-color: the name and colour you use at shared tables.
• topjigsaw-mode, topjigsaw-piece-target: Classic or Mystery, and the piece count you last picked.
• topjigsaw-coach-done, topjigsaw-grab-tip-done, topjigsaw-zoom-tip-done, topjigsaw-saved-tip, topjigsaw-howto-dismissed, topjigsaw-install-dismissed: tips you’ve already seen or closed.

Visit statistics (only if you allow them)

• topjigsaw-seen, topjigsaw-visit-day, and in session storage topjigsaw-session, topjigsaw-session-started: whether you’ve been here before, the day your visit was last counted, and this visit. Removed when you switch statistics off.

Ad measurement (only after an ads yes)

• topjigsaw-ad-visit: that you came from one of our ads, for 30 days.
• Google’s cookies, listed under Our ads.

Other services your browser talks to

• Hosting. The site is served by Vercel, which, like any web host, briefly processes your internet address to deliver pages.
• Pictures. TopJigsaw’s own pictures load from our copies on Cloudflare, which, like any host, briefly processes your internet address to deliver them. Pictures you find with search (and ours, if our copy can’t be reached) load directly from Wikimedia Commons, so Wikimedia sees the request just as if you’d opened the picture on their site. Searches you type in TopJigsaw are sent to Wikimedia Commons to find pictures.

How long things are kept

• Visit statistics (daily visits and game events): 13 months, then deleted.
• Scrambled internet addresses (spam protection): 48 hours, then cleared.
• Photo reports: 12 months.
• Feedback: up to 24 months, or sooner if you ask.
• Finish counts (no identifier): kept, as they can’t be traced to anyone.
• Picture votes (scrambled device code): until you delete them, by tapping your vote again or with Delete my data.
• Shared table messages: not kept once delivered.

Why we’re allowed to use it

For visitors in the European Union, the UK and similar places, the legal reasons are:

• Your consent for visit statistics and, if you came from one of our ads, Google’s ad measurement. You can withdraw it at any time, above.
• Providing what you asked for for shared tables, votes, finish counts and feedback replies.
• Legitimate interests in keeping the service safe and working: the scrambled addresses that stop spam, photo reports, and the hosting logs any website has.

Where it’s processed

Vercel, Supabase, Cloudflare and Google may process data in the United States and other countries. Where data leaves the EU or UK, it’s covered by those providers’ data protection terms, such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

Your rights

Depending on where you live (for example under the GDPR in Europe, the UK GDPR, Canada’s PIPEDA, or California and other US state laws), you can ask to see the data held about you, have it corrected or deleted, object to its use, restrict it, or take a copy, and you can withdraw your consent at any time. TopJigsaw doesn’t know who you are, so to find what belongs to you, send your device code below with your request to privacy@topjigsaw.com. You can also complain to your local data protection authority (in the UK, the ICO; in Canada, the Office of the Privacy Commissioner).

No selling

TopJigsaw doesn’t sell personal information and doesn’t use it to profile you. The one thing that reaches an advertiser is the ad measurement under Our ads, and only after you say yes to it; some US state laws may count that as “sharing”, so Global Privacy Control (or Do Not Track) keeps it off unless you switch it on yourself.

Children

TopJigsaw is for people 13 and over. It doesn’t ask for or knowingly collect personal information from anyone, including children. If you’re under 16, ask a parent or guardian before saying yes to statistics. Shared tables should only be joined with people you know.

Changes

If TopJigsaw adds sign-in, leaderboards or advertising, or collects anything new, this page will be updated first to say exactly what changes, with a new date at the top, and TopJigsaw will ask again.