Privacy Policy

Who we are

Jigsaw Friends is an independently developed jigsaw puzzle game operated by Eric Mwenda. This policy explains how we handle information on this website and in the game, including its account and community features.

For privacy questions or requests, contact mwendaenrique5@gmail.com. The game is in development; account sign-in and community features are being introduced gradually. The sections below apply when you use the relevant feature.

Information we handle

• Game accounts and sign-in. We create a game account identifier, including for guest accounts. If you link Google, Apple, or Facebook, we use the provider’s verified account identifier to recognise you. We retain the provider name, identifier, linking information, and information needed to secure your sessions.
• Your profile. The handle, display name, biography, interests, avatar, cover image, and visibility choices you enter in Jigsaw Friends.
• Pictures and collections. Images you choose to upload, their titles, descriptions, categories, tags, accessibility descriptions, collections, and sharing settings. We also store processed versions and thumbnails needed to display and play them.
• Play and social activity. Puzzle progress, saved boards, attempts, completions, likes, bookmarks, follows, blocks, muted accounts, reports, and activity notifications. We record timestamps and settings needed to make these features work.
• Technical and support information. Session and device labels, request and error information, IP addresses processed when connecting to our hosting or security services, and messages you send to support. We do not need your precise location to play.

Guest play does not require a Google, Apple, or Facebook account. A guest account is still an account with an identifier and associated game data; it is not a promise of untraceable activity.

Google, Apple, and Facebook sign-in

We use provider sign-in to authenticate you and link or recover your Jigsaw Friends account. You sign in with the provider in your browser; we do not receive your provider password.

• Google: our integration requests openid, email, and profile. The identity response may include your email address and basic profile information. The current implementation uses the verified account identifier and does not copy your Google email, name, or picture into your public game profile.
• Apple: our integration requests name and email. You may use Apple’s Hide My Email option. We use the verified identifier and retain an encrypted provider token where needed to revoke the connection when you unlink or delete your account. We do not publish your Apple email or name automatically.
• Facebook: our integration requests basic public_profile permission and retrieves your app-scoped account identifier. It does not request your Facebook friends list, posts, or email.

We do not request access to your Google Drive, Google Photos library, contacts, or email messages. Importing a photo from your device is a separate action that you choose in the game.

Provider data is used for sign-in, account linking, recovery, and security. We do not sell it, use it for advertising, or use it to train general-purpose AI models. Provider identifiers and sign-in credentials are not public profile fields. You can also manage the connection in your provider’s account settings; revoking a provider connection does not by itself delete your Jigsaw Friends account.

Why we use information

We use this information to run the game, keep you signed in, save and restore progress, display the content you choose to share, organise your library, record likes and solves, and connect you with creators you follow. We also use it to respond to requests, review reported or submitted content, prevent abuse, troubleshoot failures, and protect accounts.

Where applicable law requires a legal basis, we rely on providing the service you request, your consent for optional permissions or sharing, legitimate interests in security and support balanced against your rights, and legal obligations. You can decline optional provider sign-in or photo permissions; the related feature may then be unavailable.

What other people can see

New uploads and drafts start private. Your publishing and profile settings determine what is available to other players. Public pictures and approved public profile information may be visible outside the app through a shared page. Anyone with an unlisted link may be able to open its content, and recipients can forward that link.

Other players can see public engagement counts. Puzzle creators may see you in their solver list if you enable that option. Your private bookmarks, folders, blocks, and sign-in credentials are not displayed as public profile content.

Before uploading a picture, consider the people and personal details visible in it. Processing removes embedded image metadata from the versions we serve, but it cannot remove a face, address, document, or other information visible in the picture itself. Other people may retain screenshots or copies of content you share.

Hosting, access, and disclosures

Game account records and uploaded images are stored on the VPS infrastructure we operate. Our hosting, network, and security providers process information needed to deliver and protect the service. Where Cloudflare is used for delivery or protection, traffic passes through Cloudflare. Google, Apple, and Meta process their own sign-in activity under their own privacy policies.

Authorised operators may access information when needed for support, security, content review, or legal requirements. Private uploads are not placed in the public feed simply because they were uploaded. We may disclose information when legally required, to protect people or the service, or with your direction. We do not sell personal information.

Hosting and sign-in providers may process information in countries other than yours. Contact us if you need information about the arrangements relevant to your account. We use appropriate safeguards where required by applicable law.

Retention and deletion

We keep account, library, and progress information while your account needs it to provide the service, unless you remove it or request account deletion. Security, moderation, and support records may be kept where reasonably necessary to investigate abuse, resolve requests or disputes, or meet a legal obligation.

An accepted account-deletion request disables access and hides your shared content. Background processing removes uploaded image files, personal progress, collections, relationships, and linked sign-in records, and anonymises remaining profile and puzzle references. Limited deletion, security, or moderation records may remain for those purposes. Removing a provider grant can depend on the provider being available.

Deletion is not an instant erasure of every backup or copy: any existing backups remain restricted and are removed through their retention cycle. Content others have already copied, and data independently held by a sign-in provider, are outside our control. We can explain the status of a deletion request and any necessary retention when you contact us.

See account and data deletion for the in-game and email request methods. Uninstalling the game or signing out does not delete server data.

Your choices and rights

You can edit your profile, choose what to share, adjust solver visibility, manage linked providers and sessions, and delete your account. You may also contact us to request access, correction, a copy of your data, deletion, or information about our processing. Depending on your location, you may have rights to object, restrict processing, withdraw consent, or complain to your local data protection authority.

We may need to verify account ownership before acting on a request. Send your game handle and request to our support email; do not send passwords, access tokens, or identity documents unless we establish a necessary secure verification process. Withdrawing consent does not affect earlier lawful processing.

Your device and this website

The game asks for camera or photo-library permission when you choose a related feature. You can change these permissions in your device settings. Selecting or taking a photo does not, by itself, publish it to other players. Device-only photos and saves may remain on your device until you remove them there.

This public website does not use advertising trackers, analytics scripts, or a newsletter form. Its images and fonts are served with the site. Hosting and security infrastructure necessarily process connection details and may use essential security mechanisms. If you follow an email link, your email service handles the message.

We use HTTPS and access controls to protect server communications and data, and platform secure storage for supported game sessions. No storage or transmission system can guarantee absolute security.

Children and policy updates

The current account and community service is intended for people aged 13 or older, or the higher minimum age required where they live. It is not directed at children under 13. If you believe a child has supplied personal information inappropriately, contact us so we can investigate and remove it where required.

We will update this page as the service changes and revise the date above. Material changes to data use will be communicated through an appropriate notice; we will request consent where required before using provider data for a new purpose.