Privacy policy

This explains what ("we") stores when you use Daily Grid, why, and what you can do about it. We keep it short because there is not much to say: we run no advertising and no analytics, and we do not sell or share your data.

If you play without an account

Your puzzle progress, timer and streak are kept in your browser's local storage on your device. We never receive them. Clearing your browser data deletes them. If you later create an account, we ask your browser to hand them to us once so your streak carries over (see below).

If you create an account

We store:

• Your email address, name and password. The password is stored as a one-way hash, never in the clear. If you sign in with Google, we receive your name, email address and a Google account identifier, and no password.
• Your play history: which puzzles you have started or solved, your progress in them, how long they took, how many hints you used, and the day each solve counted for.
• Your streak, your daily hint count and your lesson progress.

We use this to run the site: to save your progress across devices, keep your streak, enforce the daily hint allowance and send the emails you ask for (email verification and password resets). The legal basis is that it is needed to provide the service you signed up for.

Who else handles it

• Our email provider (Postmark) delivers the verification and password reset emails we send you.
• Google, only if you choose "Continue with Google".
• Our hosting and network providers process requests, including your IP address, to serve the site and protect it from abuse.

We do not sell your data and we do not use it for advertising.

Cookies

We use only the cookies the site needs to work. See Cookies and storage.

How long we keep it

Account data is kept until you delete your account. Password reset tokens and sessions expire automatically.

Your rights

You can download everything we hold about you, correct your email address or name, change your password, or delete your account permanently, all from your account page. Deleting your account removes your profile, play history, streak and lesson progress.

You also have the right to ask us what we hold, to object to how we use it, and to complain to your data protection regulator (in the UK, the Information Commissioner's Office).

Contact

Questions about your data: please use the contact details on our website.

Changes

If we change this policy in a way that matters, we will say so on this page and update the date above.