Privacy
Privacy Policy
Clear disclosure: account data, local storage, game history, and sockets - we do not sell your data. Updated: September 2026.

At a glance
We do not sell your data
JWT tokens, localStorage, and game history exist only to run HappyPuzzle - not for ads or data brokers.
Account & session only
Email, username, game history, and session JWT when you play - no ad SDKs or tracking pixels.
You stay in control
Sign out clears tokens. Email support to request account or history deletion.
On this page
1. Who we are
HappyPuzzle is a web app for competitive chess online. Contact: [email protected].
If we ship a browser extension, it will have its own short policy at /extensions/privacy.
2. What data we collect
We collect only what the game needs to run. We do not sell personal data.
- Account (if you register): email and password hash; username, avatar, ELO, win/loss stats.
- Session JWT: access/refresh tokens stored in the browser after sign-in or guest creation.
- Game history and board state on the server so you can resume matches and view profiles.
- Game preferences (time control, AI difficulty, board theme).
- Technical server logs (IP, request time) for normal API operation - no separate ad analytics.
3. Where data is stored
Browser localStorage holds session and UI keys when you use the web app.
Third-party analytics cookies are not used. Browser cookies may exist only as part of normal HTTP/WebSocket operation.
- Access and refresh tokens - JWT session
- User profile cache - faster reloads
- Game settings - last selected time control and preferences
- UI state - toasts and lightweight client flags
4. Sockets & online play
For online games, matchmaking, and move sync the client connects to Socket.IO with JWT in auth.token. Events carry game state between players in real time.
Socket traffic is for gameplay only. We do not sell socket or matchmaking data to third parties.
5. Third parties
There are currently no ad networks, social pixels, or external analytics SDKs in the core app.
Hosting and infrastructure depend on your deployment; this policy describes application logic.
6. Retention & your rights
Game and account data are kept while the service runs or until you request deletion. You can sign out in the UI (tokens are cleared from storage).
To delete an account or history, email [email protected]. We will handle reasonable deletion requests manually.
7. Children
The service is not aimed at collecting children’s data. If you believe a minor’s data entered the system, contact us and we will remove it.
Contact
Privacy questions: [email protected]. Cookie details: /cookie.
Privacy questions: [email protected]. Cookie details: /cookie. Extension policies: /extensions/privacy.
