Privacy

Your solves stay in your browser. Times, scrambles, move streams and everything the analysis is built from live in localStorage and are never sent anywhere. Clearing your browser data deletes them, and we cannot help you get them back, because we never had them.

We store your email address, and either a password hash or the public half of a passkey. A password is hashed with scrypt and cannot be read back. A passkey’s private half never leaves your device — we hold only the public key, which is useless to anyone who steals it.

Your solves then sync so they follow you between devices, along with a handle and a rating. The handle and rating are public: that is what a ladder is.

We count three things: whether people who arrive actually solve a cube, whether they come back, and whether they return the next day. Nothing else.

It is entirely first-party. No third-party script is loaded, there is no advertising network, nothing is sold or shared, and there is no session recording. The identifier is a random value in localStorage — not a cookie, not a fingerprint, and not derived from anything about you. Clearing site data makes you a new visitor.

No IP address is recorded. The table has no column for one, which is a stronger guarantee than a promise.

If your browser sends Do Not Track or Global Privacy Control, no identifier is ever created and no event is ever sent. Nothing is sampled and nothing is anonymised, because nothing happens at all.

Firefox and Brave send one of these by default. In most other browsers it is a single setting, and some privacy extensions send it for you.

Deleting your account removes it and everything attached to it in one statement — solves, ratings, duels, challenges, sessions, passkeys and measurements — because every one of those has a foreign key that cascades. There is no soft delete and no recovery window.

One, and only once you sign in: your session. It is httpOnly, Secure, and scoped to this site, and it holds a random value that means nothing anywhere else. There are no advertising or analytics cookies, which is why there is no banner asking you about them.