What we keep, and what we don't.

When you tap Get started with Google, Google sends us your name, email, profile picture URL, and a stable Google account ID. We use the ID to know it is you next time, the name and picture to show your avatar in the header, and the email so you can sign in again from a new device.

We never see your Google password. Sign-in is handled by Google directly through OAuth.

The puzzles you add, their names and piece counts, and the sessions you log with their dates, piece estimates, and any notes. These are tied to your account, stored in our database (hosted by Turso), and visible only to you when you are signed in.

Cover photos and session photos are stored on Vercel Blob, the file storage side of our hosting provider. Only you, signed in to your account, can see them. We do not post them anywhere or share them with other users.

One extra step is specific to Puzzle Pace: when you ask for a progress estimate, that session photo is sent to Anthropic, the company behind the Claude AI models, which looks at the image and estimates how many pieces are placed. Anthropic does not use data sent through its API to train its models by default, and their own policy covers their side: see anthropic.com/legal/privacy. If you would rather keep a photo out of that flow entirely, you can log a session without one.

Puzzle Pace sets three cookies on your browser, all of them strictly necessary to keep you signed in. They expire after 30 days, or when you sign out.

• __Secure-authjs.session-token proves to the server that you are signed in.
• __Host-authjs.csrf-token blocks cross-site request forgery during sign-in.
• __Secure-authjs.callback-url remembers which page to send you back to after Google redirects.

That is the full list. No advertising cookies, no third-party tracking pixels, no fingerprinting.

We use Vercel Analytics to count page views and see which pages are slow. It is cookieless and aggregate: instead of an identifier that follows you around, it builds a daily hash from your IP and browser, throws the hash out overnight, and cannot recognize you the next day.

Separately, our own server logs record product events (things like "a session was logged" or "a photo was analyzed") together with the account they belong to. We use those logs to keep the app working and understand which features matter. They stay on our side and are not shared or sold.

We rely on a few sub-processors to run the app. Each sees the slice of data it needs and nothing more.

• Google for sign-in (sees your Google account, since that is the identity).
• Vercel for hosting, analytics, and photo storage (sees app requests, IPs, cookieless analytics pings, and your uploaded photos).
• Turso for the database (sees the rows: puzzles, sessions, account records).
• Anthropic for AI progress estimates (sees the session photos you submit for analysis, and nothing else).

We do not sell, rent, or trade your data with anyone else.

Your account, puzzles, and photos stay around for as long as you want them to. Ask us to delete your account and we wipe it: the database rows and the stored photos.

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email hello@puzzle-pace.com from the address tied to your account and we will handle it promptly. No forms, no friction.

If we make a meaningful change to how we handle your data, we will update this page and bump the date below. If a change affects something you have already given us, we will let you know in the app before it takes effect.