SpeedcubeQuest

Privacy Policy

Last updated: 2026-10-05

Who we are

SpeedcubeQuest is an independent, non-commercial project run by an individual based in Sweden. That person is the data controller responsible for the personal data described here and can be reached at [email protected]. Their full identity is available on request.

What we collect

When you create an account we store your email address and a hashed password. We also store your solve times and algorithm selections so they sync across devices.

If you use the app without signing up, solve data is kept in your browser's local storage and never sent to our servers.

How long we keep it

Your account data is kept for as long as you have an account. You can delete the account yourself from the account page, and everything tied to it is removed from our database at that moment. We also take an encrypted backup of the database once a day and keep each copy for 30 days, so a deleted account can remain inside those backups for up to 30 days before it is gone entirely. Backups are only ever used to recover from data loss.

How we use your data

Your data is used solely to provide the SpeedcubeQuest service - displaying your solves, tracking progress, and syncing preferences. We do not sell, share, or use your data for advertising.

Cookies

We use a small number of cookies, and every one of them is needed for the site to work: keeping you signed in, remembering the language you picked, and making sure your browser talks to a single version of the app. We do not use tracking or advertising cookies.

Third-party services

  • Supabase - hosts our database and handles authentication. Supabase Privacy Policy
  • Hetzner - rents us the server the site runs on, in Helsinki, Finland. Everything the site does happens on that one machine, inside the European Union. Hetzner Privacy Policy
  • Umami - measures traffic for us: which pages get opened, where visitors arrived from, roughly which country they are in, and how quickly pages render in your browser. It stores nothing on your device and sets no cookies. Instead of keeping an identifier, it works out a visitor number by one-way hashing your IP address and browser details together with a secret that changes every month, so the number cannot be turned back into you and stops matching you on its own. If you are signed in, we also send the internal ID of your account - never your email address or your username - so that visits you make from a phone and a laptop count as one person rather than two. Signed out, nothing links your visits to an account. Umami Privacy Policy
  • Cloudflare - sits in front of the site, so every request passes through its network before reaching us, and stores our daily database backups. The backups are encrypted on our own machine before they are uploaded, with a key Cloudflare does not have, and are kept in the European Union. Cloudflare Privacy Policy
  • Sentry - error tracking. When an error occurs, Sentry receives technical details such as the error message, stack trace, browser/OS info, and page URL. Nothing is sent when no error occurs. We do not record session replays, and no personal data (email, solve times) is intentionally sent to Sentry. Sentry Privacy Policy

Your rights

You can ask us to access, export, correct, or delete your account and all associated data at any time. Email [email protected] and we will action the request.

Children

SpeedcubeQuest is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, contact us and we will remove it.

Contact

Questions about this policy? Email us at [email protected] or reach out on our Discord.