Privacy information
Last updated: 2026-10-14
Test draft — operator details have not finished loading or are incomplete.
Scope of this information
This information covers the website, including its updated shared interface. It retains the existing accounts, essential cookies, rooms and game ledger; mini-game guest identities are not automatically imported. The mini-game and platform-provided features have separate disclosures. Friend direct messages, in-game reporting and platform rewarded ads are not enabled on this website, and sharing an interface does not enable collection for them.
Task and collection data
For available progression, tasks and collection features, the server processes account or guest associations, valid joins, task progress, levels and experience, coins, reward claims, album and pack entitlements, decoration inventory and equipped items. These records display progress, calculate rewards, preserve entitlements and prevent duplicate grants. Room participants can see display names, presence and displayed decorations, but not passwords, sign-in credentials or your full account ledger.
Necessary processing and optional choices
We process information within the scope needed to provide the service you request and meet applicable legal obligations. Additional processing based on consent requires an explanation of its specific purpose, method and information, with an appropriate choice. Accepting the test terms is not consent to every future use, advertising tracking or third-party processing. Declining unnecessary processing or feedback does not restrict the corresponding basic functions.
Deletion and other information rights
Account & security lets you submit a deletion request, cancel a pending request or read its resolution. This is a request process, not instant account closure; an administrator marking it complete does not automatically erase every record. Processing requires checking the actual scope of accounts, rooms, task rewards, shared content and backups. Feedback or the published support channel can also be used to request access, copies, corrections, completion, deletion or restricted processing, and consent withdrawal or transfer where applicable. Guests and users unable to sign in may contact us too; verification is limited to what is necessary. We will handle requests promptly and explain the result or specific reasons for any refusal.
Retention, backups and removal
Sign-in sessions normally last no longer than 30 days. Generated one-time recovery codes remain valid for up to 180 days and may expire earlier after use, replacement or relevant security changes. Account, task, reward and collection information is kept while needed for its service and legitimate rights. When that purpose ends or an eligible deletion request is received, relevant data should be deleted or anonymized. Any legally required or temporarily technically unavoidable retention must be explained and restricted. Clearing browser data is not a server deletion request. Backup handling forms part of the review; a button click does not promise immediate erasure from every backup.
Hosting and processing disclosures
Page delivery, connection security, feedback and backups involve the actual hosting and processing chain. Operator and provider details, retention arrangements and any cross-border processing still require verification and disclosure for the deployed environment. A test-draft notice means that review has not been completed. Testing does not waive privacy obligations; we do not claim that all data is stored in a particular country or that every transfer requirement is satisfied without verification.
Children and young users
Young users should review the service and privacy information with a parent or guardian. Processing personal information of children under 14 requires applicable guardian consent, specific rules and safeguards; general terms or a self-declared age cannot replace these requirements. Guardians may contact feedback or the published support channel about children’s information. This text does not certify completion of identity verification, anti-addiction controls or other launch requirements.
Updates and choices
We publish the update date and highlight changes to purposes, methods, information categories or important rights. Fresh or separate consent will be requested where required. Continued browsing is not treated as consent to new, unnecessary processing.
Courtyard data
Courtyard layouts, inventory, check-ins and reward records are associated with your account and retained on the server. Lobby chat has been removed and no longer displays or accepts messages. Historical messages remain stored but are no longer public.
Room chat history
Chat text, room nickname, send time and identity association are stored on this site’s server and provided only to seated players in that room. Each room retains its latest 100 messages, removed when the room is deleted. Existing backups follow their normal retention and are not removed immediately. The browser stores per-room hidden-player preferences; hiding messages affects only your view.
Automatic language
In Auto mode, the site chooses Chinese when it is the browser’s first supported language or a trusted network request indicates a Chinese-language region; otherwise it selects English from the supported languages. This feature does not access precise device location, use an extra IP lookup service or separately store IP or region records. Your manual language choice is saved in this browser, takes priority and can be changed back to Auto.
Uploaded pictures
Uploaded photos are optimized in the browser into WebP images up to 3,072 pixels on the longest side and small previews. The server stores the optimized image, title, dimensions and account association, not the original file or EXIF location metadata. Uploaded pictures do not enter the public gallery. In solo play and private rooms, only the uploader and seated players in that room can access the image; if the uploader opens a public room, or changes a room to public, any visitor can see the picture on the puzzle board, and players can still take screenshots. Pictures remain until deleted by the uploader or handled through an account data request. An image can be deleted immediately once its linked puzzles are complete. It cannot be deleted while an unexpired, unfinished room uses it. Deletion does not immediately remove existing backup copies.
Data we store
If you register, the server stores your username, display name, salted password verifier and login sessions. Passwords and recovery codes are not stored in plaintext. Guests use a browser identity credential. Server rooms also store puzzle progress, participant names, times and achievements.
Public information
Public tables show display names, pointers and presence. Do not put private information in your display name or room title. Share private invitation links only with intended participants.
Browser storage
Essential cookies support sign-in and guest identity. Browser storage saves language, theme, local puzzles and the local scrapbook. Advertising tracking is not integrated. Any future advertising or analytics integration requires updated information and applicable choices.
Room periods and historical data
Rooms follow the help rules: public tables appear in the lobby for 24 hours from creation, or 36 hours for 500 pieces and up. Tables with progress are then hidden and reclaimed 30 days after their last actual play; continuing may briefly return them to the lobby. Empty tables with no meaningful progress may be removed sooner. Existing private/solo tables retain their 30-day period after actual play or completion. Hiding a feature does not erase historical results or discontinued-feature data; these require handling by their purpose, applicable period and data requests. The operator still needs to verify and disclose production retention for feedback, security logs and backups; a snapshot count is not a number of days.
Contact and data requests
Account & security provides deletion requests and their status. Feedback may include descriptions, screenshots and an optional email address that you submit. Before public service, the operator must complete contact details, hosting and processor information, applicable processing grounds and cross-border processing disclosures.
Guardians may contact us without the child’s account password. Please initially provide only the relevant account identifier and a description of the issue; do not email identity-document photos, passwords or recovery codes. Any further verification must be explained and limited to what is necessary.
Account & security · Problem feedback