Privacy & your data

Effective September 11, 2026. These details describe the current HuddleJoy web apps.

What is saved

HuddleJoy saves the content and activity needed to run your rooms: drawings, text, votes, choices, participant identifiers and timestamps. Content is stored with our hosting provider, Cloudflare, in its D1 database. We do not send your room content to a live AI model. Simulated characters use procedural rules.

Browser access for shared rooms

Your browser stores a participant credential so you can return to your seat and, if you created a room, use its host controls. Keep this browser data private. Clearing it or moving to another device can remove your access. A room invitation is not proof of a person’s identity; we cannot guarantee that separate browser participants are different people.

Solo puzzle saves

Sudoku, Patches, Queens, Crownshift and Routelings Rescue save your board or repairs, attempt details, hint usage, puzzle version and save timestamps to Cloudflare D1. A private, necessary session cookie grants this browser access. Its server-side credential is stored as a hash. Guest access belongs to this browser: clearing cookies, using another device or letting the session expire can remove that access. Playing does not require an account.

Saves are separate from 30-day shared rooms and are not removed by room expiry. Earlier save revisions are retained for recovery. Pending unsynced attempts and recovery copies may be kept in this browser’s storage. Wait for confirmation that progress is saved before leaving. Contact support from the same browser if you need help accessing or deleting a save; do not send us your private cookie.

Optional confirmed accounts

When account sign-in is available, signup uses your email and password. We send requested confirmation and password-recovery links through Cloudflare Email Sending. Each link expires after 15 minutes, works once and must be confirmed in the browser where you requested it. Sending a link does not create an account or subscribe you to marketing. Confirming signup creates an account for that email; you then sign in with your password. Password recovery also verifies your email before changing the password. We keep your email, account identifiers, linked guest sources, delivery state and timestamps in Cloudflare D1; confirmation tokens and session credentials are stored as hashes. Passwords are stored only as salted, computationally expensive hashes, never as readable passwords. Account sessions expire after 30 days; scheduled cleanup removes expired credentials in bounded batches without deleting saved games or their history.

Signing in does not replace an open game. Choose Use account saves for each guest puzzle you want to connect, review any conflicting attempt and confirm which to continue. Original guest saves, retained copies and earlier revisions stay available for recovery. HuddleJoy remembers that choice for this browser and puzzle. To use account saves from another browser, sign in using the same email and password, then choose the account version. Older email-link accounts can set their first password using email-verified recovery without replacing their account. Unsynced moves that were never stored cannot be recovered through your account. Signing out pauses account access; it does not delete the account or change the guest player. After two different completed puzzles in each game, an optional invitation offers account signup or sharing. Choosing Continue playing dismisses that game’s invitation in this tab’s session storage without an identifier. Neither signup nor sharing is required.

Who can see a room

Invite links grant access to shared rooms. Only share them with people you trust, and do not submit sensitive, confidential or identifying material. Room content is not end-to-end encrypted. The service operator may access stored content when needed to operate the service, investigate abuse or handle a verified support request.

Parallax strokes are revealed to room members when all three strokes are sealed. A shared emblem link lets anyone holding that link view the completed artwork. Presence contributions are shown after the expected participants consent. RelDelta interpretations and replies are shown to the corresponding recipient and the author. Other room information follows the selected activity’s sharing controls.

Expiry, deletion and sharing

Shared rooms expire 30 days after creation. Expired content becomes unavailable through the app and is removed by scheduled cleanup in bounded batches, so physical cleanup can lag behind expiry. The host can delete the current session from the live app using its privacy controls. Other sessions and later Parallax rounds are separate. Any Parallax member can permanently stop public emblem sharing for that round.

Downloaded copies, screenshots and content already received by others cannot be recalled. Hosting recovery copies may temporarily retain deleted data according to Cloudflare’s recovery settings; live deletion is not a promise of immediate erasure from every backup.

Private visit statistics

We keep daily aggregate counts of public activity-page views, estimated browsing sessions, activity sessions played or finished, guided-practice attempts, and solo puzzle attempts started or solved for up to 365 days. Solo puzzle counters are browser-reported; repairs and puzzle identifiers are not sent. Entry sources are reduced in your browser to a category, such as Google, Discord or unknown; the referring URL is not transmitted. A counter flag on each live room prevents duplicate play counts and expires with the room. Guided-practice answers and drawings stay only in your page. These aggregate counters do not save visitor IDs, IP addresses, user-agent strings, referring URLs, query strings, room identifiers or room content. The dashboard is restricted to the owner.

A timestamp in session storage estimates when a browsing session starts; it contains no visitor identifier and is not sent to the server. A new estimate starts after 30 minutes without a measured page view, or in a new tab. No analytics cookies are set. Do Not Track and Global Privacy Control are respected for this measurement. Known crawler labels are filtered, but these totals are not verified counts of people.

Service delivery and security

Cloudflare processes connection information to deliver and protect the service. HuddleJoy uses a hashed connection address for short-lived abuse limits, separately from visit statistics. Limited technical error information may be recorded to diagnose failures; room content and full invitation URLs are not intentionally logged by the application. Owner sign-in is handled by Cloudflare Access using the owner’s approved email.

There are no advertising trackers or sale of room content in the current apps. Browser fonts and application assets are delivered with the site.

Requests and reports

For access, correction, removal, contribution-withdrawal requests, or abuse reports, contact support@huddlejoy.com. Your email and message are used to respond. Start with the activity name and a general description; do not include credentials, private invitation links or sensitive details in your first message. We may need to verify your connection to a session before making changes and cannot promise recovery when browser credentials have been lost.