Privacy policy

playjustone.com is made and run by Atypical Makers. The controller of any personal data described here, in the sense of the GDPR, is:

Write to that address about anything on this page — it is the same inbox that answers a bug report.

Every puzzle is playable without signing in, and an anonymous game leaves nothing behind on our side that points at you. Your finished games and your half-solved boards are kept in your own browser, under the justone.plays, justone.<game>.progress, justone.nonogram.votes and justone.print keys in local storage; a fifth key, justone.rules, remembers nothing more than which games’ rules you have already been shown, so they fold away instead of greeting you every day. We cannot read them, and clearing your browser’s site data erases them for good.

Finished games build up there: your calendar and your streak are read straight out of them, so they stay in the browser until you clear it. Sign in later and this browser offers them to the account — but only what the account actually takes is removed here. Anything it cannot place stays exactly where it is.

Some moves are checked on the server — a Five letters guess has to be, or the answer would be sitting in the page. Those requests carry the guess, not you: nothing is written down and nothing is tied to a person.

A solved Nonogram asks you one question: did the picture look like anything? Answering adds one to a counter on that picture, and that is all of it — no account, no identifier, nothing that could be traced back to a person. The three counts are what tell us a drawing nobody can make out at 10 × 10, so that it stops being dealt at that size. It is one answer per picture, and the question is not asked again: which answer you gave is remembered in your own browser, under justone.nonogram.votes, so the board shows it back to you rather than asking twice.

Like any site, ours sits behind a web server that keeps short-lived technical logs — the address a request came from, the path, the response — used to keep the site up and to look into faults or abuse, and rotated away shortly after.

An account exists so a streak survives a new phone. If you make one, we store:

• your email address — the account is identified by it;
• your name, if you signed in with Google and Google passed it along — it is what the sidebar calls you, and its first letter is your avatar;
• a link to your Google profile picture, from the same sign-in. What is stored is the address, never the image itself — and as it stands nothing on the site displays it, since the avatar is a letter;
• the language you picked, so the site opens in it everywhere;
• a referral code — an unguessable string minted the first time you open the print page, so a QR code on paper never carries a database id;
• when the account was created and last changed, and whether it has any extra role (a couple of accounts can curate puzzles).

Signing in by email link stores nothing else at all — no name, no picture, just the address you asked us to write to. Signing in with Google asks Google for your email address, your name and the address of your profile picture, and nothing more — we get no access to your Google account, and you can withdraw the connection at any time from your Google account settings.

Sessions are kept in our database, and the cookie in your browser only points at one. The legal basis is Article 6(1)(b) — you asked for an account, and this is what it takes to give you one.

For a signed-in player, each game you finish leaves one row a day: which game, which day, when you finished, how many seconds of actual play it took, and the game’s own record of it — which levels are done and the board you ended with, so the archive can show it back to you.

A board you are still working on is kept separately so you can put it down and pick it up on another device; it is deleted the moment that board is finished.

If you answer the question a solved Nonogram asks — did the picture look like anything — we also keep which board you answered about and which of the three answers you picked. That much is tied to the account for one reason: so the same board on another device shows your answer back instead of counting a second one. Nobody else is shown it, nothing is scored on it, and it earns you nothing.

The seconds counted are active ones, and no clock is ever shown while you play. It is the history and the streak — the same ones a signed-out player already has in their own browser, kept somewhere a browser cannot reach — and it is used for nothing else. Legal basis: Article 6(1)(b) again.

The site sends exactly one kind of email: the sign-in link, when you ask for one. It is valid for fifteen minutes and it is the only thing that will ever arrive. There are no digests, no reminders, no “you haven’t played today”, and no marketing — the puzzle waits for you without being announced.

Delivery goes through Resend (Resend, Inc., United States), acting as our processor: they see your address and the message in order to hand it to your mail provider. That is a transfer outside the EEA, made under the European Commission’s standard contractual clauses.

We use Umami, an open-source analytics tool running on our own server rather than someone else’s. It sets no cookie, stores no IP address and builds no cross-site identifier, which is why this site has no consent banner: there is nothing here to consent to.

It records page views, and one event beyond them — that a visit arrived through a shared link or a printed sheet, along with the code that brought it. Legal basis: Article 6(1)(f), our legitimate interest in knowing whether anybody is playing.

All of them are first-party, all of them do a job you asked for, and none of them follow you anywhere:

• justone.locale — the language you picked. One year.
• justone.theme — light, dark, or whatever your system says. One year.
• justone.ref — the code a shared link or a printed sheet arrived with, remembered so the first one that brought you here is the one that gets the credit. Ninety days.
• authjs.session-token — your sign-in session, only once you sign in; it expires after thirty days, and signing out removes it immediately. Two short-lived companions (authjs.csrf-token and authjs.callback-url) exist only while you are signing in.

No advertising cookies, no analytics cookies, no third-party tracker of any kind.

A share or a printed sheet can carry a code — the link looks like https://playjust.one/p/sudoku/<code>, and it becomes an ordinary ?ref= parameter when it lands here. When a visit arrives with one, we note two things: the code, and the puzzle day. Not your address, not your account, not a device — there is nothing in that note to tie back to a person, and it exists to answer “did that sheet bring anyone at all”, never “who”.

The code on your own sheets belongs to your account, but it is random rather than derived from anything about you, so paper handed to a stranger gives nothing away.

The site and its database run on servers of Hetzner Online GmbH in Nuremberg, Germany — inside the European Union.

Besides Hetzner, only two companies are involved at all:

• Resend delivers the sign-in email;
• Google, and only if you chose to sign in with Google.

Nobody else. Your data is not sold, not shared, not handed to an advertising network, and not used to train anything. We would disclose it only if the law actually required us to.

We may point you at something else we make — another of our sites, a thing we built. A link like that is a link and nothing more: nobody is paid for it, no network is told you followed it, and no profile of you is anywhere in it.

• Account and finished games — for as long as the account exists. Ask us to delete it and everything attached to it goes at the same time: games, sessions, the answers you gave about pictures, the Google connection, all of it.
• Answers about a picture — kept as counts on the picture itself, for as long as the picture is in the pool. Like the notes about shared links, they name no one, so a deleted account does not empty them.
• Boards in progress — until that board is finished, then removed straight away.
• Sign-in links — fifteen minutes. Sessions — thirty days.
• Notes about shared links — kept as counts. They name no one, so there is nobody to delete them for.
• Server logs — days, not months.
• Whatever is in your own browser — until you clear it, or hand it to an account. It never reaches us on its own, so there is nothing here for us to delete.

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop processing it, or ask for it in a portable form. Write to contact@playjustone.com and we will answer within thirty days. There is no self-service delete button yet — a message is enough, and it gets done by hand.

You also have the right to complain to a supervisory authority. Ours is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

Nothing on this site profiles you or makes automated decisions about you, and the site is not built for children — it asks for no age because it has no reason to know one.

When this policy changes, the date at the top changes with it. If a change is a real one — a new processor, a new kind of data — it will be said plainly here rather than slipped into a sentence.