Privacy Policy

What we collect

Account details: your name, username, email address and, if you sign up with email, a one-way hash of your password. We never store the password itself. Signing in with Google or Apple gives us your name and email from that provider.

Guest play: a guest is a real account with a generated name and no email, so progress can move over if you sign up later.

Gameplay: puzzles you start and finish, times, scores, streaks, coins, achievements, matches and rooms you join, and friends you add.

Country: estimated from your connection when your account is created, used only for the country leaderboard. You can change or clear it in your profile.

Images you upload to make a jigsaw. These are private: only you, and players in a match you start with that image, can see them.

Push notifications: if you allow them, your browser's push address, so we can tell you about invites.

Cookies and local storage

We use a sign-in cookie, a language cookie and a theme cookie. They are needed for the site to work, and none of them track you across other sites.

Your browser also keeps your theme choice and puzzle progress, so a game can resume.

Advertising

Free accounts may see ads from Google AdSense on results and lobby screens, never during play. We request non-personalised ads. Google may still use cookies to limit repeats and to measure ads. Premium accounts see no ads.

Payments

Premium payments are handled by our payment provider. We never see or store your card number. We keep only your plan, its status and the provider's reference to your subscription.

Who processes your data

Hosting and databases: Vercel, Neon (PostgreSQL) and our Redis host. Email: Resend. Payments: our payment provider. Photos in the image library come from Unsplash, which sees requests for those images. We do not sell your data.

How long we keep it

We keep your data for as long as you have an account. Guest accounts that are never used again may be removed. Password-reset links expire after an hour.

Your choices

You can change your name, country, language and theme in your profile.

You can delete your account from your profile at any time. This removes your account, scores, sessions, uploads, friendships and subscription record straight away, and cancels any active subscription first.

To request a copy of your data, write to us at the address below.

Children

VenoMind is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Changes

If this policy changes in a way that matters, we will update the date above and, for significant changes, tell you in the app.