Privacy
Short version: there is nothing to sign up for, so there is no profile of you anywhere. This page lists what does exist, because "we care about your privacy" is not a list. It describes what the software actually does as of 2026-09-13; if that changes, this page changes with it.
What we do not do
- No accounts, no e-mail addresses, no passwords.
- No advertising and no ad networks.
- No cookies. Not one, not even a "necessary" one — so there is no cookie banner either.
- No tracking across sites, no advertising or marketing analytics, no profile of you anywhere.
- No third-party fonts or embeds; everything on the page is served from pieceware.app, apart from the one counter described below.
- Nothing is sold, shared or handed to a "partner", because there is nothing to hand over.
Counting visits
One script is loaded from another address: a self-hosted page counter at
api.panalytics.money. It records that a page was viewed, which page, and which site sent you — no
cookies, nothing written to your browser's storage, no identifier that follows you between visits or to any other
site. If your browser sends Do Not Track, it does nothing at all. Blocking it changes nothing about the
game; it exists so we can see which puzzles people actually play.
What your browser stores
When you join a puzzle, the game keeps a random token in your browser's local storage so that a reload or a dropped connection brings you back as the same player instead of a duplicate. The play page may also remember the display name you typed (up to 24 characters) so you do not have to retype it. Both stay on your device; you can clear them like any site data, and nothing breaks.
What the server keeps
Rooms
A room is the puzzle's configuration (which picture, how many pieces, shape, rotation) and the position of every piece, plus timestamps. Rooms live in the server's memory and are written to a snapshot file every 30 seconds so a restart does not lose games. A room is deleted after 12 hours without any player in it. Player names and chat messages are relayed to the other people in the room while you are there; they are not written to the snapshot and are not stored after the room is gone.
Uploads
A photo you upload is resized to a JPEG of at most 1600 pixels (plus a 400 pixel thumbnail) and stored under a random id. The original file and its metadata (EXIF, including location) are not kept. The resized image is served to anyone who has its address, which means the people you gave the room link to. It is deleted together with the room, or after 24 hours if it was never used in a room. The full description is on the upload page.
Logs
Like any web server, ours writes a plain log line for events such as a room being created, an upload, or a player joining. Those lines include the network address (IP) the request came from, the room id and the display name. They are used to spot abuse and debug problems, and are kept only as part of ordinary server log rotation; nobody analyses them for anything else. IP addresses are also used, in memory, for rate limits (for example 10 uploads and 30 new rooms per hour per address).
Other people in your room
Everyone in a room sees every other player's display name, cursor position and chat messages while they are there. A room is unlisted (its link is random), but not private in the cryptographic sense: whoever has the link can join. Share it accordingly.
Children
The site collects no personal data and has no accounts, so there is nothing to consent to. The chat is unmoderated beyond a rate limit; use the site with children the way you would use any shared online space.
Questions
Ask on GitHub. If you believe an uploaded image should be removed sooner than the room lifetime, say so there with the room id and it will be dealt with.
