Jumbly legal
Privacy Policy
Clear privacy details for Jumbly gameplay, device-saved storage, analytics, optional accounts, AI-assisted puzzle systems, sharing, and your rights.
Last updated: July 4, 2026
These pages describe the current Jumbly closed beta and planned platform features in plain language. We will keep them updated as accounts, analytics, subscriptions, and wider launch systems mature.
Information Collected
- Gameplay information, such as game selected, puzzle id, puzzle number, guesses, attempts, rotations, mistakes, solve status, streak changes, hints used, completion time, and share actions.
- Device and technical information, such as browser type, device type, operating system, route visited, approximate performance signals, language, referrer, and timestamps.
- Support information you choose to send, such as your email address, bug reports, screenshots, puzzle feedback, account requests, or privacy requests.
- Account information if optional accounts are enabled, such as email address, authentication identifiers, profile settings, usernames, avatars, favorite game, synced stats, subscription status, and support history.
- Social preview information if you use profile, friend, leaderboard, or challenge features, such as invite links, friend display names, example rankings, challenge codes, and result comparison metadata.
- Payment-related status if optional subscriptions launch. Payment details should be handled by a payment processor, not stored directly by Jumbly.
Closed Beta Data Limits
- Jumbly is in closed beta, so features, storage behavior, and data flows may change while the product is tested.
- Some profile, friend, leaderboard, archive, feedback, and Labs-game experiences may be saved on this device or shown as a closed beta preview unless you clearly choose to connect an account.
- Some closed beta progress may reset during product fixes, puzzle corrections, or storage changes.
- Please avoid sending sensitive personal information in feedback or support messages unless we specifically ask for it.
localStorage Usage
- Jumbly can save progress on this device. We use localStorage and related browser storage to keep the app playable without accounts, backend services, or API keys.
- Local storage may remember streaks, stats, wins, games played, last played dates, onboarding state, feature flags, settings, anonymous session ids, feedback, share state, and unfinished game progress.
- Game-specific storage may include guesses, attempt grids, selected LinkUp tiles, Word Orbit rotations, timers, hints, solved groups, and completion panels.
- Clearing browser site data, using private browsing, switching browsers, or uninstalling the PWA may remove saved progress.
Analytics Usage
- Jumbly may use analytics to understand how people play, where puzzles feel too easy or too hard, which flows are confusing, and whether the app is reliable on different devices.
- Tracked events may include game started, guess submitted, puzzle solved, puzzle failed, hint used, share clicked, feedback submitted, game selected, onboarding completed, return visit, PWA installed, challenge created, and challenge completed.
- Analytics metadata may include game id, puzzle id, puzzle number, attempt count, result, difficulty, source route, device type, timestamp, anonymous session id, and user id if you are signed in.
- If analytics providers are not enabled, Jumbly keeps closed-beta diagnostics on this device instead of sending analytics to a third-party provider.
Optional Accounts
- You do not need an account to play Jumbly. Core gameplay should continue to function without login.
- If configured, email magic-link sign-in and enabled OAuth providers such as Google, Apple, or Facebook may be offered. Unavailable providers should be hidden rather than shown as live options.
- Supabase may be used for authentication, profile records, synced stats, friends, leaderboards, archives, and challenge history when the required environment variables and provider settings are configured.
- Optional accounts may allow players to save streaks, stats, puzzle history, preferences, challenge history, and subscription status across devices.
- If you create an account, we may process your email address, account identifiers, authentication state, profile settings, synced gameplay records, support requests, and account timestamps.
- Users may request deletion of account data later when production account operations are finalized. Local browser data may still need to be cleared separately on your device.
Anonymous Sessions
- Jumbly may create an anonymous session id so gameplay, feedback, analytics fallback logs, and challenge links can work without an account.
- Anonymous sessions are intended to identify a browser or installation, not your real-world identity.
- If you later create an optional account, Jumbly may offer a way to connect or sync anonymous stats to that account where possible.
- Clearing browser storage may reset the anonymous session id and disconnect saved progress from previous activity.
Cookies
- Jumbly may use cookies or similar technologies for essential app behavior, anonymous sessions, preferences, analytics, optional accounts, security, PWA behavior, and future subscription state.
- Optional providers for analytics, authentication, database storage, or payments may set cookies if those integrations are configured.
- Jumbly provides a cookie banner and Privacy Controls page for analytics and marketing/ads choices. Strictly necessary storage can still be used for gameplay progress, replay prevention, preferences, security, and future login sessions.
- You can also control cookies through your browser settings. Blocking cookies may affect account sign-in, preferences, analytics consent, subscriptions, or future paid features.
- See the Cookie Policy for more detail.
PWA Storage
- If you install Jumbly as a Progressive Web App, your browser or operating system may store app shell files, icons, cached routes, offline fallback assets, and install prompt state.
- PWA storage helps the app feel fast and allows previously loaded pages to remain available where possible.
- PWA storage may work alongside localStorage for gameplay progress, stats, streaks, and preferences.
- Removing the installed app or clearing site data may remove PWA storage and reset saved progress.
AI-Generated Puzzle Systems
- AI may assist puzzle generation, puzzle validation, hints, explanations, categories, difficulty scoring, quality warnings, and admin review workflows.
- AI-generated candidates should be reviewed before publication, and Jumbly may edit, reject, approve, remove, or republish puzzle content.
- Normal gameplay should not require sending your guesses to an AI provider.
- If live AI providers are enabled, Jumbly will document the provider, purpose, safety checks, and relevant data handling here.
Sharing Features
- Jumbly includes social sharing features such as copied result grids, share cards, native mobile share sheets, and asynchronous challenge links.
- Shared content may include game name, puzzle number, emojis or result symbols, solve status, attempts, rotations, mistakes, and Jumbly branding.
- Challenge links may include a code, game id, puzzle id, result payload, timestamps, and comparison details so another player can play the same puzzle.
- You choose where to send shared results. The receiving platform's privacy practices apply after you share content outside Jumbly.
Optional Third-Party Services
- Supabase may be used for optional accounts, synced stats, puzzle history, challenges, profiles, and database-backed puzzle content when configured.
- PostHog or another analytics provider may be used to understand product behavior, retention, puzzle fairness, and performance when configured.
- OpenAI may be used to assist puzzle candidate generation, validation, hints, explanations, and moderation workflows when configured.
- Stripe may be used for optional subscriptions, checkout, billing portal access, invoices, and subscription status when configured.
- If these providers are not enabled, Jumbly should continue with device-saved fallbacks and should not crash.
Data Retention
- Local gameplay data remains on your device until you clear it, uninstall the PWA, reset browser storage, or your browser removes it.
- Account and synced gameplay records may be retained while your account is active and for a reasonable period afterward for backup, security, legal, or operational reasons.
- Support and bug report records may be retained while we respond, investigate, improve the product, and keep operational records.
- Analytics retention depends on provider configuration and will be finalized before production launch.
User Rights
- Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain uses of personal information.
- For data saved on this device, you can remove information directly by clearing browser storage, cookies, site data, or the installed PWA.
- You can use /privacy/request to record a closed beta privacy request, including access, export, deletion, correction, objection, restriction, or consent withdrawal.
- You can use /privacy/controls to manage analytics consent, cookie preferences, and device-saved Jumbly data.
- For account data, synced stats, support records, or analytics data connected to your account, we may need to verify identity before completing a request.
- We may need to verify your identity before responding to account, deletion, export, or rights requests.
Deletion and Export Requests
- Closed beta request routes exist for account deletion, device-saved data export, and privacy rights requests at /account/delete, /account/export, and /privacy/request.
- Data saved on this device can usually be removed by clearing browser storage, cookies, site data, or uninstalling the PWA.
- When production accounts are enabled, deletion and export workflows should cover user stats, puzzle history, challenge history, account profile data, subscription identifiers, and analytics associations where applicable.
- Some records may need to be retained for security, legal, fraud prevention, billing, dispute handling, or operational reasons.
GDPR and UK GDPR
- If GDPR or UK GDPR applies, Jumbly's legal bases may include consent, contract performance, legitimate interests, legal obligations, and, where relevant, your explicit choices.
- Legitimate interests may include operating the games, preventing abuse, improving puzzle quality, maintaining security, understanding app performance, and supporting players.
- You may have rights to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where applicable.
- Supervisory authority, representative, data protection officer, and international transfer details will be finalized as Jumbly's operating structure matures.
Children and Age Guidance
- Jumbly is designed as a general daily puzzle platform and is not specifically directed to young children.
- If you are under the digital-consent age that applies where you live, please use Jumbly with permission from a parent or guardian.
- Parents and guardians should supervise use of sharing, challenge links, optional accounts, future subscriptions, and any future multiplayer features.
- Jumbly does not knowingly target advertising to children and aims to avoid collecting more child data than needed to operate a general puzzle experience.
- If Jumbly launches in markets or app stores that require age gates, parental consent, or child-specific disclosures, those controls should be added before launch.
Security
- Jumbly aims to use reasonable technical and organizational safeguards appropriate for a beta puzzle platform.
- No internet service can be guaranteed completely secure, especially while optional accounts, analytics, AI workflows, subscriptions, and challenge systems are evolving.
- Please report suspected security issues to support@jumbly.games and avoid sending sensitive information through ordinary support messages unless requested.
Contact Information
- Product: Jumbly
- Company: Polyhedron
- Support email: support@jumbly.games
- Privacy email: privacy@jumbly.games
- Location: London, United Kingdom
- Please do not send sensitive personal information unless we specifically ask for it.
For more detail on AI-assisted puzzle systems, read the AI Policy.