Privacy

What the app keeps, and where

Everything you make is written to your browser’s own storage on the device you made it on: the photograph you chose, the puzzle cut from it, the game as far as you have got, and the settings you last played with.

Saving is not sending. Making and playing a puzzle moves none of it off your device, and nobody here can reach it in the course of ordinary play — there is no copy on our side to reach, and no request that would fetch one.

Sharing a starter puzzle, which you can do today

A link to a starter puzzle carries an identifier for one of the photographs that ship with the app, and the shape of the puzzle: how many pieces, which cut, and how much help it starts with.

It carries no picture, no progress, and nothing about you or your device. The person who opens it already has the photograph, because it came with their copy of the app — and nothing goes anywhere until you send the link yourself.

Sharing your own photographs

Not built yet. Today no photograph of yours leaves your device.

When it is built, this page will be updated to say what travels, where it is kept and for how long — before it is switched on, not after.

Nothing here measures you, today

This site and the app load no analytics, no advertising and no attribution code of any kind. Neither sets a cookie to recognise you, and neither keeps an identifier to count you by.

Every font, image, stylesheet and script on this site is served from this site, so your browser fetches nothing from anybody else while you read it.

If that changes — say, to count how often a starter is played — this page will say what is counted and how, before the counting begins.

Writing to us

A message to support@tinkerdev.io brings us what you wrote and the address you wrote from, along with anything you chose to include — a screenshot, the browser, what you had just done.

We use it to answer you and to fix what you found, and we protect it with care that is reasonable for what it is. That is reasonable care and not a guarantee: no message sent over the internet can be made completely secure.

We may pass it on, or keep it, where that is needed to answer you, to keep the service secure, to deal with misuse, or to meet an obligation the law puts on us. Whatever we hold, we hold while one of those reasons lasts and not past it. We set no fixed period, because what is kept depends on the reason for keeping it.

Working without a connection

The app keeps a copy of itself in your browser’s cache so it opens and plays with no connection at all. What is cached is the app and the photographs that ship with it — never anything about you, and never anything you made.

Choosing what is kept

Clearing the site data for the app in your browser removes what the app stored there: the puzzles, the photographs you added to them, your progress and your settings, on that browser and that device. Stopping playing is not the same thing — a closed tab keeps everything where it was.

Clearing cannot reach what was never the app’s: the original photograph in your camera roll or your files, anything you exported, and anything you sent to us. We cannot put a cleared puzzle back either, because puzzles are not backed up to a server of ours.

Asking us about what we hold

Whatever we hold about you — today, a message you sent us — you can ask to see, ask us to correct, or ask us to stop using. Write to support@tinkerdev.io and a person will answer.

We act on a request to stop within a reasonable time, and tell you what stopping means for anything already under way. Some of what we hold stays after it: where something is still needed to answer you, to keep the service secure or to meet an obligation the law puts on us, that much is kept while the reason lasts and used for nothing else.