Last reviewed: 2026-09-08
Who is responsible
Games Hygge (legal publisher identity to be confirmed before release) operates The Jigsaw Table and Games Hygge website. For questions or requests about personal data, contact Public privacy contact is being confirmed before release..
The short version
- Ordinary puzzle saves, greeting drafts, and cached received cards are stored on your device.
- Online content downloads, multiplayer, first-party gameplay analytics, and hosted puzzle cards involve our servers.
- We do not integrate advertising networks, advertising identifiers, Facebook login, or cross-app advertising tracking in the current build.
- Publishing a puzzle card uploads its selected catalogue picture, greeting message, and styles after you explicitly confirm.
- A card link can be used by anyone who has it. Revoking it cannot erase copies already downloaded by recipients.
Data kept on your device
The app stores puzzle definitions and progress, settings, downloaded image files, greeting drafts and exported images, cached received cards and their progress, and local multiplayer profiles and known-player history. A profile includes credentials needed to reconnect to the server.
These local files are not automatically uploaded as cloud saves by Games Hygge. Operating-system or device backups may handle app data under your device settings; we do not control those backups. Removing the app or clearing its storage can remove local progress.
Data processed by our services
| Feature | Data and purpose |
|---|---|
| Picture downloads | Your connection address and requested catalogue, pack, or image version are processed to deliver files and check for updates. We cache downloaded pictures locally. |
| Multiplayer | Username, server user ID, a random installation ID, device display name, hashed authentication/recovery secrets, game membership, invitations, join requests, presence, puzzle identifiers/settings and piece positions. These provide identity, invitations, shared progress, recovery and abuse prevention. |
| Gameplay analytics | A random installation identifier (hashed for database storage), session/puzzle/image identifiers and versions, starts/resumes/completions/exits, piece count, difficulty, rotation, duration, hints, progress, multiplayer flag, app version, platform and event time. These help us understand usage and improve the game. |
| Puzzle cards | The picture and greeting you choose to upload, its styles, random card ID, publication/expiry information, a hash of the sender's revocation secret, and reports or revocation status. These deliver the gift and allow moderation and stopping new downloads. |
| Support and privacy requests | Your email address and the information you deliberately send us, to answer the request and verify ownership where needed. |
| Website and network security | Connection IP address, request and basic browser/network information are processed to return pages, secure connections and operate the service. Hosting and operational systems may record diagnostic events. |
Device display names can contain your own name. Choose a device name and public multiplayer username you are comfortable sharing. We do not upload your address book for known-player suggestions.
Analytics uses pseudonymous identifiers, not truly anonymous records. Usernames, greeting text, image files, recovery codes and hardware advertising IDs are not fields in gameplay events. Received-card puzzles skip gameplay analytics in the current implementation.
The development build currently has no in-app analytics opt-out. We will review the required disclosure, choice and legal basis before public release. Do not read this policy as saying the game collects no data.
Greeting uploads
Sharing a composed image uses the operating system's share sheet and the destination app you select.
Publishing a hosted puzzle card requires a separate confirmation. The app resizes and re-encodes the uploaded picture, at most 1024 pixels on its longest side, and uploads a snapshot of the message and styles. The selected puzzle picture comes from the game catalogue.
Anyone with a valid card link can download its payload through the app. The solve-to-reveal experience is a game rule, not encryption or access control: a modified client could inspect the message without solving. Do not use puzzle cards for sensitive or confidential information.
How long data stays
- Local data: remains on your device until you delete it or the app's storage is removed. Platform backups may keep separate copies.
- Hosted picture/message: available for up to 365 days unless revoked earlier. Expired content is purged by the service's cleanup process, which runs at startup and hourly.
- Revocation records: small records remain after card content is removed to prevent publication retries from recreating a revoked card. The current service has no automatic expiry for these records.
- Multiplayer and analytics: the development services currently have no scheduled automatic deletion for these databases. A production retention schedule and operational deletion procedure are required before release.
- Support and backups: the publisher must approve retention and backup-expiry periods before this policy is final. No fixed deletion deadline is promised here for the development service.
A downloaded gift remains on its recipient's device after the server copy is revoked or expires. We cannot remotely remove another person's saved or forwarded copy.
Your choices and rights
You can delete local puzzles in the Library, remove received cards in Puzzle cards, stop sharing your sent cards, and delete local greeting drafts/exports in Settings. Removing a local profile or uninstalling is not deletion of the multiplayer server account.
Depending on your location, you may have rights to access, correct, erase, restrict or object to processing, and receive a portable copy of applicable data. Consent-based processing may be withdrawn without affecting prior lawful processing. You can complain to your local data-protection authority. If applicable, our final policy will identify the lawful bases for each processing purpose before release.
See account and data deletion, or contact Public privacy contact is being confirmed before release.. We may need to verify ownership without asking you to send private recovery codes by ordinary email.
Cookies and this website
This website uses no advertising cookies, analytics scripts, advertising pixels, embedded social-media feeds or third-party web fonts. Fonts, images and scripts are served by us. Site navigation, help search and image enlargement do not require an account and are not sent as analytics events.
The contact form, when enabled, prepares a draft in your email app. It does not submit information to this website, store your entries, or send email automatically. Clicking external store or email links takes you to another provider.
Children and safety
The game is not currently released in an app-store children's category. Final age ratings, intended age groups and any parental-consent requirements must be reviewed before release. Adults should supervise online invitations and sharing when a child uses the app. Contact us about data submitted by a child so we can review it and take appropriate action.
Security and changes
Public game services use HTTPS. Authentication and recovery secrets are hashed on the multiplayer server, and hosted-card revocation secrets are stored as hashes. Hosted card JSON is not encrypted at rest or end-to-end encrypted. No service can guarantee perfect security.
We will update this page when the game or its data practices change and revise the date above. Material changes should also be disclosed in the app where appropriate.