Privacy

Last updated October 17, 2026

Pebble Box Games makes short puzzle games. This page says plainly what we store about you, where we keep it, for how long, and how to download or delete it. It covers every Pebble Box game and this site.

The short version

You can play every game without a pass. Then your progress stays in your browser, and we store nothing about you unless you send feedback (see Feedback).
If you create a pass, we store your email address and your game progress so it follows you to other devices and games.
Each game counts how many puzzles are started and finished, with nothing that identifies you or your device (see Counting plays).
We don't sell your data, show ads, or use tracking or analytics scripts.
You can download everything we hold about you, or delete your pass, at any time on your pass page.

Playing without a pass

Your stats, streaks, settings and any puzzle in progress are saved in your browser's storage on your device. They never leave it. Clearing your browser's site data removes them.

What we store when you have a pass

What	Why	How long
Your email address, and a random pass ID. If you sign in with Google, also the ID Google gives your account, so we can link it to your email. If you add a passkey, its public key and the details your device reports with it (a credential ID, the kind of device, and when it was added); the private key never leaves your device.	To sign you in and to email you sign-in and confirmation codes	Until you delete your pass
Your game data: each day's result (solved or not, score, attempts, time taken, when and in which time zone you finished, and up to 1 KB of game-specific detail about the result), your stats and streaks, your settings, any puzzle in progress, streak freezes, and a history of streak freezes earned, used and returned	So your progress follows you across devices and games	Until you delete your pass
Backups of the game data	To recover from mistakes or failures	Up to 35 days after your pass is deleted
After deletion, only your random pass ID, with nothing else attached	To make sure deleted data can never come back from a backup	35 days after deletion, then deleted automatically, which can take a few more days
Keyed hashes (one-way scrambled values) of email addresses, IP addresses and pass IDs. Never the addresses themselves.	Only to limit how many sign-up, sign-in and confirmation emails we send, how many sign-up challenges one device can ask for, and how much feedback one device can send, so nobody can use us to flood someone's inbox or our services	One hour for the email and sign-up limits, two days for the feedback limit. Expired hashes are deleted automatically, which can take a few more days.

You sign in with a one-time code we email you, with a passkey on your device, or with Google.

If you sign in with Google, we receive your email address and Google's ID for your account, and nothing else from your Google account. If you later sign in with an email code for the same address, it's the same pass. Apple players who choose "Hide My Email" get a private relay address from Apple; that pass stays separate from any pass under your real address.

Feedback

Each game has a feedback button. When you send feedback, we store your message, its category, the puzzle date, the screen you were on, your language setting and time zone, your browser and operating system family (for example "Safari 19 / iOS 26"), the size of your browser window, whether the game is installed as an app, which version of the site it came from (preview or live), when it was sent and received, and game details such as the puzzle number. Feedback is kept for 90 days, then deleted automatically, which can take a few more days. It is not linked to your pass, even when you're signed in. So we can respond quickly, most messages are also copied into an alert to our team's email inbox and to our own phone notification service; during a burst of feedback, later messages send only a count. We delete those copies within 90 days too. Please don't put personal details in your message.

Counting plays

When you start a puzzle and when you finish it, the game sends us the game's name, its version, the puzzle's date and whether it was a start or a finish. Nothing else: no pass, no device ID, no score, and we don't store your IP address or browser details with it. Each one is added to totals per game, and our service logs keep a line for it (the game, the event and the time, nothing about you) for up to 30 days. A browser sends each one once per puzzle, so a puzzle played on two devices counts twice.

For players with a pass, we also count, per game and day, how many passes recorded a result and how many of those were on a streak of two days or more, and, across all games, how many passes were created and deleted. Only these counts leave our database; each one also appears in our service logs for up to three months, with no pass ID or email. We keep the totals for up to 15 months and use them to see whether people play, come back and sign up.

Where your data is kept

Your pass, your game data and your feedback are stored with Amazon Web Services in the United States (the us-east-1 region, in Virginia). Sign-in emails are sent through Amazon Simple Email Service. The only copies kept anywhere else are the feedback alerts described above. The sign-in page at auth.pebblebox.games is run by Amazon Cognito and sets the cookies sign-in needs: one keeps you signed in to it for one hour, so you can move between our games without signing in again, and others protect the sign-in form against forgery and remember your language. We use no other cookies, and no third-party scripts run on our pages.

Services we use

Amazon Web Services hosts the games and this site, and stores your pass, game data and feedback and sends our emails in the United States (the us-east-1 region).
Microsoft 365 runs our team's email at pebblebox.games. It holds the feedback alerts described above and any email you send us, such as a request to privacy@pebblebox.games.
Google, only if you choose to sign in with Google. Google then tells us your email address and its ID for your Google account, as described above.

We don't sell your data or share it for advertising, and we don't use it for marketing: the only automated emails we send you are sign-in and confirmation codes. We email you otherwise only to answer a message you sent us.

Why we use your data

If you're in the EU or the UK, the law asks us to say on what basis we use your data:

To provide your pass (your email address, sign-in details and game data): we use them to sign you in and keep your progress in sync, which is the service you sign up for under our terms.
To prevent abuse and keep the service secure (the keyed hashes above, and short technical logs of errors and refused requests, kept for up to three months, which hold no email or IP addresses and at most your random pass ID): this is our legitimate interest in stopping floods of email and attacks on the service.
To improve the games (feedback you choose to send, and the play and pass totals above, which identify no one): this is our legitimate interest in hearing from players, seeing whether the games are used and fixing problems.

Downloading your data

Sign in on your pass page and choose Download my data. We email you a confirmation code first, so only you can download it. You get one file with every record we hold about you, across every game.

Deleting your pass and data

Go to your pass page at pebblebox.games/account and sign in.
Choose Delete my pass.
Enter the confirmation code we email you. If you signed in more than a few minutes ago, we ask you to sign in again first.

Deletion starts at once, with no grace period. From that moment your pass and its data can't be reached from any device, and every device you're signed in on stops syncing. We then remove your game data and your sign-in profile, retrying any step that fails until it's done. The data can remain in backups for up to 35 days, and we keep only your random pass ID for those 35 days, plus the few days automatic deletion can take, so the deleted data can never be restored. Progress saved in a browser without a pass stays on that device until you clear the browser's site data.

These are also the data deletion instructions for players who sign in with Facebook, once Facebook sign-in is available.

Other requests about your data

You can download or delete your data yourself at any time, as described above. For anything else, such as a question about what we hold or how we use it, or if you can't receive our confirmation codes, email privacy@pebblebox.games from your pass's email address. If you can no longer use that address, write from another one and say so; we act on the request once we've confirmed the pass is yours, and we'll tell you what we need for that. We reply within 30 days. If you're in the EU or the UK, you can also complain to your local data protection authority.

Children

Passes are for people 13 or older, as our terms say. Anyone can play without a pass. Our games are for a general audience and are not directed at children under 13. We don't ask your age, and we don't knowingly create passes for children under 13. If you believe a child under 13 has a pass, delete it from the pass page or contact us below, and we'll delete it.

Changes

If we change what we collect or how we use it, we'll update this page and the date at the top before the change takes effect.

Contact

Questions about privacy: privacy@pebblebox.games.