Privacy policy

Effective from October 13, 2026.

1. What data do we process?

• When you sign up: your username, email address, an encrypted (irreversible) hash of your password, and the display name and bio you choose to give.
• If you log in with Google: we receive your account ID, email address and name from Google (we suggest the name as your display name; you can change it). We never see your Google password. You can unlink Google at any time in Settings.
• While you play: the puzzles you solve, your times and the number of hints you use.
• Friends: friend requests and friendships.
• Security logs: the IP address of failed login attempts, for no more than 24 hours.
• Bot protection: when you sign up, and after a failed login attempt, Cloudflare Turnstile checks that you're not a bot. To do this, Cloudflare (Cloudflare, Inc.) looks at your IP address and technical details of your browser; it sets no cookies and uses the data for this purpose only. Legal basis: our legitimate interest in protecting the service and its accounts (GDPR Article 6(1)(f)).

2. What do we use it for?

To run the service: logging in, leaderboards, statistics, friends and password resets. The legal basis for this is providing the service (GDPR Article 6(1)(b)). We don't sell your data or use it for advertising.

3. What is public?

Your username, display name, bio, times and statistics are visible to anyone on your profile and on the leaderboards. Your email address is never shown.

4. Cookies and local storage

Cookies needed for the site to work (no consent needed, because the site doesn't work without them):

• nj_sess – session: logging in and form protection. Until you close the browser.
• nj_remember – "keep me logged in", only if you tick it.
• nj_guest – an anonymous ID, so you can continue a daily puzzle you've started without signing up.

Your browser's local storage (not a cookie; it never reaches the server) keeps your theme and sound settings, the state of unfinished free-play games.

We don't use tracking or advertising cookies, so there's no cookie pop-up.

5. How long do we keep it?

For as long as your account exists. You can delete your account at any time on the Settings page; all data belonging to it is then permanently deleted.

6. Your rights

You can ask what data we hold about you, and ask for it to be corrected, deleted or handed over in a portable format. You can file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu, Falk Miksa utca 9–11, 1055 Budapest, Hungary), or with the data protection authority of the EU country where you live.