Privacy policy

Last updated 8 October 2026

Who we are

CrumbJar is run by [operator name not set], [operator address not set], who is the data controller for the information described here. You can reach us with the contact form. We aim to collect as little as possible.

What we collect

What you do on the site. Whether you chose the family view (a cookie, so random picks stay within it). On Feel Good, some pages (such as the Good Things Jar and the Sand Garden) can save what you make so it is still there next time. That is kept in this browser on this device, under names starting cj-fg:, and is never sent to us: we cannot see it. You can see, download or clear it on the "What Feel Good has saved" page (/feelgood/my-things), and clearing your browser data removes it too.
A random visitor identifier stored in a cookie, so the same browser cannot vote or submit the same thing repeatedly. It is not linked to your name.
Technical data such as a one-way scrambled (hashed) version of your IP address, your browser type and your approximate country, which our hosting provider works out from your connection. We use it to stop spam and abuse. We do not store raw IP addresses in our database.
If you create an account: your username and a securely hashed password. Only a Puzzles account asks for an email address (see that part below); no other part does.
If you contact us: what you send, and an email address if you choose to give one.

Section by section

Every part of CrumbJar works as this page describes. This is what each part keeps on top of that, all in one place.

Survive (/survive)

What you do there. The choices you make in a scenario are added to totals. Your finished result is saved so it has a shareable link, together with a private (pseudonymous) code made from your visitor cookie, so only this browser can add a name to it. That code cannot be turned back into the cookie. If you add a first name to your result, it is shown on that result and its share image.

Candid (/candid)

What you do there. Your answers are added to the totals. To stop the same browser answering a question twice, we keep a private code made from your visitor cookie that records that you answered, not what you answered. It cannot be turned back into the cookie. If you choose to tell us your age range, it is used only for group totals. If you are signed in, your private stats (how many questions you answered and how often you sided with the majority) and your saved questions are kept for your account. Only you can see them, and deleting your account deletes them. Questions you submit are published without your name. If you are not signed in, a short code from your visitor cookie is kept with the question so this browser can list the questions it sent.
If you create an account there: your username and a securely hashed password, kept until you delete the account. We do not ask for your email address.
Adults only in places. Some parts are for adults only: they are shown only to people signed in as adults (18 or over).

Jury (/jury)

What you do there. Your verdict is added to the case totals. So that each person votes once, we also keep your verdict with a private (pseudonymous) code: a one-way code made from your visitor cookie that is different for every case, so your verdicts cannot be linked across cases. It also lets the site show you your own verdict again. Nobody else can see it. If you are signed in, we also keep a private jury record for your account: how many cases you have judged, how often you sided with the majority, and which cases were counted, so none is counted twice. Only you can see it, and deleting your account deletes it. Cases and comments you submit are published without your name. Comments show a juror number that changes from case to case, or your username if you choose to show it. If you submit a case we store a scrambled copy of your private owner link so you can update, close or delete it.
If you create an account there: your username and a securely hashed password, kept until you delete the account. We do not ask for your email address.

Either/Or (/either-or)

What you do there. Your choices are added to totals. They are not stored against your name. So each browser counts once, we keep a private (pseudonymous) code made from your visitor cookie; it records that you chose, not what you chose, and it cannot be turned back into the cookie. If you finish a set of ten, we store the profile (your ten choices and scores) so the share link works, with a private code so this browser can recognise it as yours. It contains no name or contact details. Your browser remembers which decisions you have seen recently, so new sets feel fresh. This stays on your device.

Word (/word)

What you do there. Your word is added to daily totals for the world and, if we can tell your country from your connection, for your region. We do not store it against your name. So each browser adds one word a day, we keep a private (pseudonymous) code made from your visitor cookie; it records that you took part, not your word, and it cannot be turned back into the cookie. A cookie on your device remembers the word you added today so we can show you your stats. It expires within two days. We keep a scrambled code for each day so the same browser cannot add more than one word a day. It cannot be linked across days. If you answer a weekly special question, your answer is added to that week’s totals in the same way, kept apart from the daily words. A second cookie remembers your answer for that week.

Mood (/mood)

What you do there. The mood you add is counted in daily totals (overall, by hour, and by broad region such as "United Kingdom" or "Europe" from your approximate country, when we can tell it from your connection). It is not stored against your name or account. So each person counts once a day, we keep a private (pseudonymous) code made from your visitor cookie and scrambled differently each day. It records that you added a mood today, not which mood, and it cannot be turned back into the cookie. Pulse questions work the same way. A signed cookie remembers the mood you picked today, so that if you change it the earlier one is removed from the totals. If you have an optional account and are signed in, your mood for each day is saved privately to that account so you can see your last 30 days. You can delete it at any time.
If you create an account there: your username and a securely hashed password, kept until you delete the account. We do not ask for your email address.
How long it is kept. Totals are kept indefinitely because they contain no personal data. The private daily codes that stop double counting are kept as long as the daily results they protect. The mood cookie expires at the end of the day. Private account mood history is kept until you delete it or your account. Hashed technical data used to stop spam and abuse, and any activity records, are deleted after 13 months. Reports and messages are deleted after 2 years.

Guess (/guess)

What you do there. Your answers are added to totals for each sentence. The words you typed may be shown as part of a group once at least three people have given the same answer. So each browser answers a sentence once, we keep a private (pseudonymous) code made from your visitor cookie; it cannot be turned back into the cookie. Game and daily results are saved so you can share them. They are linked to a private code made from your visitor cookie, not to your name.

Predict (/predict)

What you do there. Predictions you lock, with the display name or @handle you choose, the server time you locked them, and your chosen category, visibility and resolve-by date. Public receipts, including the creator name shown on them, are published and may be indexed by search engines. Unlisted receipts are visible to anyone with the link. Private receipts are visible only to their owner. Outcome declarations and evidence links you add. Votes and watches are added to totals. So each browser counts once, we keep a private (pseudonymous) code with each one, made from your visitor cookie; it cannot be turned back into the cookie. If you are signed in, receipts you watch are also listed on your account.
If you create an account there: your username and a securely hashed password, kept until you delete the account. We do not ask for your email address.
How long it is kept. Receipts are permanent records by design and are kept until removed for breaking the rules or at your request under data protection law. If you delete your account, your private receipts are deleted, and on public and unlisted receipts your name is replaced with "Deleted account". Vote totals are kept indefinitely because they contain no personal data; the private codes that stop double votes are kept as long as the receipt. Hashed technical data used to stop spam and abuse, and any activity records, are deleted after 13 months. Reports and messages are deleted after 2 years.

Slang (/slang)

What you do there. The sentences you translate are stored with the translation so the result has a shareable link. They are not stored against your name. Battle votes are added to totals. So each browser votes once in each category, we keep a private (pseudonymous) code made from your visitor cookie; it cannot be turned back into the cookie.
AI text generation (for example Anthropic or an OpenAI-compatible provider), if enabled: the sentence you type and the chosen mode are sent to generate the translation. No identifier about you is sent.
How long it is kept. Translations and aggregated vote totals are kept indefinitely because they contain no personal data about you (please do not type any). The private codes that stop double votes are kept as long as the translation. Hashed technical data used to stop spam and abuse, and any activity records, are deleted after 13 months. Reports and messages are deleted after 2 years.

Later (/later)

What you do there. The task you type, the category and the start and end time of your session. Tasks are checked automatically and personal details are never shown. Receipts are public pages that anyone with the link can see. They show the task (or a category name), the duration and aggregate comparisons. They are not listed in search engines. Counts of how you used doom mode (numbers only).

Biscuit Bravery (/biscuit-bravery)

What you do there. Nothing you do in Biscuit Bravery is sent to us. Your progress is kept in this browser (local storage, under a key starting cj-toy:), and you can clear it at any time from the page or by clearing your browser data. Share pictures are drawn by your browser. They are only sent anywhere if you choose to share them. Like the rest of CrumbJar, we count how often things happen here (such as a finished round), as the privacy notice describes. Your progress itself is never sent.

Pocket Allotment (/pocket-allotment)

What you do there. Nothing you do in Pocket Allotment is sent to us. Your progress is kept in this browser (local storage, under a key starting cj-toy:), and you can clear it at any time from the page or by clearing your browser data. Share pictures are drawn by your browser. They are only sent anywhere if you choose to share them. Like the rest of CrumbJar, we count how often things happen here (such as a finished round), as the privacy notice describes. Your progress itself is never sent.

Pet Rock (/pet-rock)

What you do there. Nothing you do in Pet Rock is sent to us. Your progress is kept in this browser (local storage, under a key starting cj-toy:), and you can clear it at any time from the page or by clearing your browser data. Share pictures are drawn by your browser. They are only sent anywhere if you choose to share them. Like the rest of CrumbJar, we count how often things happen here (such as a finished round), as the privacy notice describes. Your progress itself is never sent.

Polls (/polls)

What you do there. Your interactions with it.

Polls (/polls)

What you do there. The questions you ask, the answers you pick, and any comments or reports you send.
If you create an account there: your username, a securely hashed password and the display name you choose, kept until you delete the account. You can take part as a guest without one.
The full Polls privacy notice: /polls/privacy.

Puzzles (/puzzles)

What you do there. Your puzzle results, scores and streaks, and the age band you give so we show the right puzzles and settings.
If you create an account there: your email address (held by Supabase, which runs the sign-in, and never shown to anyone), the username you pick, which is shown publicly beside your results on the leaderboards, and, if you sign in with Facebook, the id Facebook gives us for you here. Kept until you delete the account. You can play without one. A child’s account is set up by a parent or guardian from their own account and has no email address.
The full Puzzles privacy notice: /puzzles/legal/privacy.

Signing in, difficult topics and reports

One sign-in. Signing in to CrumbJar uses your games account (at /puzzles). When you sign in, the games check, on our own server, that the account is an adult's: it has an email address and an adult age band, and this device has not been used by someone under 18 in the last 30 days. They then set two short cookies the rest of the site can read: cj_id, for any signed-in games account, which says which account it is (a private code), its public username if it has one, and whether it is an adult's; and cj_adult, which says only that an adult is signed in. Other parts of the site read only these: they do not see your email address or your age band.
Difficult topics. Things people write about grief, illness, abuse, eating, strong language, hard history or mature dilemmas stay on the site but are shown only to people signed in as adults. Everyone else sees a short notice instead. These pages are not shown to search engines and carry no adverts.
Things that are never published. Hate, threats and other people's personal details are refused. If you tell us you are thinking of hurting yourself, nothing is published and we show you where to get help.
Reports. If two different people report something, it is hidden straight away until a moderator looks at it. We keep a scrambled code for each person who reported it, made from their visitor cookie and their connection (not their name), so the same person, or the same connection, reporting twice counts once.

What we do not do

We do not sell personal data. We do not show anyone's individual answers publicly unless the site clearly says something is public (for example a submission you choose to publish). Aggregated results are shown only as totals.

Why we use it (lawful bases)

To run the site and show results: legitimate interests in providing the service you are using.
To prevent spam, fraud and abuse: legitimate interests.
To provide your optional account: contract.

Who we share it with

Hosting: Render (application hosting) and Supabase (database). They process data on our behalf under data processing terms.
Email: Brevo (Sendinblue), which sends sign-in links and account emails for the games and Polls. It receives your email address and the message, nothing else.
Signing in with another account: Google, Facebook or X, only if you choose to sign in with them. They tell us an id for your account with them (and, for Polls, your email address).

Some providers are outside the UK. Where data leaves the UK it is protected by adequacy regulations or the UK International Data Transfer Addendum.

Advertising

There are no adverts at the moment, so nothing sets an advertising cookie. If adverts are switched on, this page changes with them, and Google's advertising cookies stay off until you agree in the cookie message.

How long we keep it

Totals are kept indefinitely because they contain no personal data. To stop the same browser voting twice, each vote keeps a private (pseudonymous) code made from your visitor cookie (or, for a few counts and for reports, from your connection). That code cannot be turned back into the cookie or the connection, and it is kept as long as the result it protects. Hashed technical data used to stop spam and abuse, and any activity records, are deleted after 13 months. Reports and messages are deleted after 2 years. Account data is kept until you delete your account. Expired sign-ins are deleted automatically.

Polls and Puzzles are separate services and keep things for their own periods:

Polls. Raw analytics events are deleted after 90 days (only daily totals are kept), sign-in records and sign-in or reset links 7 days after they expire, and saved result history after 400 days. A scheduled clean-up does this once it is switched on at launch; until then it runs only when started by hand. The hashed IP addresses kept with votes, comments, guest identities, reports and the audit log are kept as long as the record they belong to. Questions and comments stay until they are deleted or removed, and account details until you delete your account.
Puzzles. Our rule is 90 days for raw gameplay events, after which they are reduced to totals with no link to you, but this is not yet done automatically, so older gameplay events are not yet removed on a timer. Account details are deleted as soon as you delete your account. If someone says they are under 18 (or under 13), the date they said so is kept for 30 days, even if the account is deleted.

Your rights

Under UK data protection law you can ask for access to, correction of, or deletion of your personal data, and you can object to or restrict some uses. Because we do not know who you are unless you have an account, we may need your visitor identifier (your cookie) to find your data. Use the contact page. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Children

You must be 13 or over to make your own CrumbJar account, and you do not need an account to play. The one exception is Puzzles, where a parent or guardian can set up an account for their child, including a child under 13, from the parent's own account; it has no email address and the parent manages it. An account for anyone aged 13 to 17 is an under-18 account. Anything marked 18+ is shown only to someone signed in with an adult (18 or over) games account.

Changes

We will update this page when our practices change and show the date at the top.