Privacy
The short version. There is no account and no sign-in. Puzlia sets no cookies. Your streaks, records and saved boards never leave your device. When you win a board your time is sent, so it can tell you where it places among everyone who played that same puzzle — with no identifier, no name and nothing that could lead back to you. Beyond that, only an anonymous, aggregate count of visits, so I know whether anyone is out there.
What stays on your device
Puzlia uses your browser's localStorage to remember your streaks, records, solved puzzles, streak freezes, the clock of the game in progress and any half-finished board. The site writes and reads that itself, on your machine only. It is not transmitted anywhere and no copy exists on any server.
Because it exists purely to deliver a feature you asked for, it counts as technical storage and needs no consent banner. You can delete all of it at any time from Your stats → "Erase my stats", or by clearing site data in your browser. Deletion is immediate and cannot be undone.
The time comparison
When you win any board, Puzlia tells you where your time places among the people who played that same board — "#3 of 8 today" — or, when there are enough of them for a percentage to mean anything, the percentile. There is no public table, no podium, no names and no profiles.
It is on by default, and it can be because it sends nothing that points to a person. This is what leaves your device when you win:
- Which board it was: the game, the difficulty and the puzzle number.
- The finished board, to check you actually solved it. That is the solution to that puzzle, identical for anyone who plays it: it says nothing about you.
- A summary of your pace: how many moves you made and how long you took between them, on average and at minimum. It is there to rule out automated submissions. Your game is not sent: not the order you played in, not where you went wrong, nothing that could reconstruct it.
No identifier is sent. No name, no nickname, no email, no account, no cookie, and no random number following you from one game to the next. What gets stored is "this board, this time" and nothing else: there is no way, for us or for anyone, to tell that two times came from the same person.
Your browser does not send the time: the server measures it, between the moment you start the board and the moment you submit it. That is what makes the comparison mean anything, and it also means your clock and your device play no part in it.
Cloudflare sees your IP address, as it does on any request to any website, and uses it in that moment to curb abuse. It is not stored alongside your time, or anywhere else in the comparison.
Legal basis: since what is stored contains no personal data, there is no processing to consent to. The only personal trace is that IP in transit, and it rests on legitimate interest (art. 6(1)(f) GDPR): the interest is keeping the comparison free of automated submissions, the impact on you is minimal, and no profiling takes place.
Why there is no button to delete your time: because there is nothing of yours to delete. A bare time, with no identifier, is not yours in any sense the law recognises — and if it were, we could not find it either. That is a more protective position than offering deletion, not a lesser one.
What is measured, and why
To know whether the site is worth continuing — and whether anyone arrives from social media — Puzlia counts visits using two services chosen specifically because neither uses cookies nor tracks individuals:
- Cloudflare Web Analytics records the page visited, where you came from, an approximate country, the device type and load speed. No cookies, no fingerprinting.
- GoatCounter records the same plus a handful of anonymous product events (for example, that someone started or finished a daily, and the rough size of their streak). To avoid counting the same visit twice in a day without identifying anyone, it stores a salted hash of your IP and browser, changes the salt daily, and does not keep the IP.
None of these events carry a name, an email, an account, or any identifier that could be traced back to you. They are counters, not profiles. Nothing is sold, shared for advertising, or used to build a profile — Puzlia has no advertising.
Cookies
None. Puzlia sets no cookies of any kind, first or third party, which is why you are not being asked to dismiss a banner. The time comparison uses no cookies either, and stores no identifier on your device.
Legal basis
Measuring audience in aggregate rests on legitimate interest (art. 6(1)(f) GDPR): the interest is knowing whether a free project is being used, the impact on you is minimal, and no profiling takes place. Because the measurement stores nothing on your device, art. 22.2 LSSI does not require prior consent.
The time comparison stores no personal data, so there is no consent to collect; the little it touches — your IP in transit, to curb abuse — rests on the same legitimate interest.
Who else is involved
The site is hosted on Firebase Hosting (Google Ireland Ltd. / Google LLC), which keeps standard server logs including IP addresses for a short period for security and diagnostics. Measurement is processed by Cloudflare, Inc. and by GoatCounter. The time comparison runs on Cloudflare Workers and its D1 database, hosted in Western Europe. Cloudflare and Google are US companies, so any transfer relies on the European Commission's adequacy decision for the EU–US Data Privacy Framework and, where needed, on standard contractual clauses.
How long things are kept
Device storage: until you erase it. Comparison times: 400 days, the same span as the daily archive. They contain no personal data. Records of a game in progress are discarded after 30 days. Aggregate statistics: retained by the measurement services in aggregate form, with no way to isolate an individual visitor. Server logs: short retention set by the hosting provider.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your personal data. How that works here, in practice:
- What is on your device is yours and under your control: viewing it, exporting it or deleting it needs no permission from us.
- For everything else there is a limit worth being honest about: since Puzlia holds no account and no identifier that points to a person, we generally cannot locate "your" data in order to act on such a request — there is nothing on file that leads to you.
Write to hola@puzlia.com with any question. You may also complain to the Spanish Data Protection Agency (aepd.es).
Children
Puzlia is suitable for all ages and deliberately collects nothing from anyone, of any age. The time comparison has no names, no nicknames, no free-text field and no identifiers: there is no way for anyone, of any age, to publish anything about themselves here. That is one of the reasons it is built this way.
Changes
If the site ever adds accounts, notifications, payments or a public leaderboard with names, this page will be rewritten before that feature ships, and the date at the top will change.