← Back to Hisorty

Privacy Policy

Last updated April 25, 2026

Hisorty is a daily history puzzle game built by Damian Krajnak. This page explains what data the game collects, why, who else sees it, and how to remove it. The short version: we keep the minimum needed to make the game work and to sync your progress between devices, and we don't sell any of it to anyone.

If you play without signing in

Your puzzle progress, stats, and theme preference are saved in your browser's localStorage on this device. Nothing is sent to a server. If you clear your browser data, the progress is gone.

If you sign in with Google

Sign-in is handled by Google. We never see your password — Google performs authentication and shares the following information with us, which we save to identify your account and personalise the interface:

  • Your email address.
  • Your name.
  • Your Google profile picture URL.

Once you're signed in, we also store your puzzle history (which puzzles you've attempted, the order you submitted, and whether you won or lost) and your aggregate stats (puzzles played, won, current streak, longest streak). This is what gets synced across your devices.

The OAuth scopes we request are limited to email, profile, and openid. We do not access anything else in your Google account.

Cookies and similar storage

  • Session cookie — used to keep you signed in. It is strictly necessary for the login feature, set as httpOnly and sameSite=lax, and is not used for tracking.
  • localStorage entries — your puzzle progress, stats, and theme preference, used to make the game work without a network round-trip on every move.
  • No marketing cookies — we don't use ad networks, retargeting pixels, or third-party tracking beacons.

Who processes your data

  • Vercel hosts the site and serves pages. Standard request logs (IP address, user agent, request path) are kept briefly for operational purposes.
  • Neon hosts the Postgres database that holds your account row and puzzle progress. The database region is United States.
  • Google handles sign-in and serves your profile image. Google may set its own cookies on its own domain when you sign in or when your browser loads your profile image. Those cookies are governed by Google's privacy policy, not this one.
  • Vercel Analytics / product analytics — we may count anonymous gameplay events (such as "a puzzle was completed") in aggregate to understand whether the game is working. No identifiers are linked to those events for non-signed-in users.

Your rights

  • Delete your account. Sign in, open the account menu in the top right, and choose Delete account. This permanently removes your user row, all sessions, your puzzle progress, and your stats from the database. To remove the data on this device too, clear your browser's localStorage or use your browser's "Clear site data" option.
  • Get a copy of your data, correct it, or ask any other privacy-related question by emailing damiankrajnakk@gmail.com.

Changes to this policy

If this policy changes meaningfully, the "Last updated" date above will change. For minor edits (typo fixes, clarifications) the date stays the same.

Questions? Email damiankrajnakk@gmail.com.