Your solves are yours.

Cubeathon is local-first. Your solve times, scrambles, sessions, penalties, theme preference, and learning progress are stored in your browser's local storage on your own device. This data never leaves your device unless you create an account and sign in to sync.

Clearing your browser's site data removes it permanently — so we recommend using the built-in JSON export on the timer page as your own backup.

If you create an account with a username and password, we store your username, your email address (we use it to confirm the account and to let you reset your password), and a securely hashed password — never the password itself. Accounts created before email became required may not have one. Signing in lets Cubeathon copy your solves to our server so they follow you across devices. Signing in sets one first-party cookie that keeps you signed in across visits — it's httpOnly (invisible to page scripts) and Secure (HTTPS-only), and is used only to maintain your session, never for advertising or tracking.

Where signing in with Google is offered and you choose it, Google confirms who you are and we keep only Google's account ID for you, so we can recognise you next time. We ask Google for your email address only to check whether you already have a Cubeathon account; it is never saved to our database. If an account already uses that email, a masked form of it (for example j•••@example.com) is shown to you once so you can sign in to that account and link Google. We don't request or keep your name, photo, contacts, or any Google access tokens. During the sign-in step, two encrypted, httpOnly cookies carry the handoff between Google and Cubeathon — while you finish signing in they can hold your Google account ID and, in the case above, the masked email. They are cleared when that step completes, and if you leave part-way through they expire on their own within 10 minutes. Unlinking Google in Settings deletes the stored ID. You can also remove Cubeathon from your Google account's third-party connections at any time.

Signing in with Apple, where offered, works the same way: we keep only Apple's account ID for you. Apple may share your email — or, if you choose Hide My Email, a private relay address — which we use only for the same existing-account check and never save. The first time you sign in, Apple may also share your name; we only use your first name to suggest a username you can change, and never save the name itself. We don't keep any Apple access tokens. You can stop using Sign in with Apple for Cubeathon at any time in your Apple Account settings.

Synced solves, sessions and statistics are private by default. If you choose a public cuber profile or create a result share link, the selected profile details and eligible result summaries become public. Solve notes and session names remain private. You can make your profile private or revoke a share link in the app. We do not sell your data.

We use a self-hosted, cookieless analytics tool to understand how Cubeathon is used in aggregate — things like which pages get visited and which product events happen (a solve was recorded, a lesson was completed, and similar). It does not use cookies, does not build a cross-site profile of you, and does not share data with advertisers. We do not run any advertising or cross-site tracking scripts, and we show no ads.

Fonts are self-hosted, so pages load without calling third-party font services. Like any website, our server processes the technical details of requests (such as your IP address) transiently in order to respond to them.

You can export all of your solve data as a JSON file from the timer page at any time, and import it back later — this works with or without an account. To delete your account and all synced data, use Delete account in Settings — it takes effect immediately. If you can't sign in, email [email protected] from the address associated with your account and we will remove it. Deleting your account never touches solves stored on your own device.

We keep encrypted database backups for disaster recovery. Anything deleted from Cubeathon — an account, synced solves, or a linked sign-in method — may remain in those encrypted backups for up to 30 days before they are automatically deleted.

If this policy changes, we will update this page and the date above. Material changes will be called out plainly — no silent rewrites.

Questions about privacy? Reach us at [email protected] or via the contact page.