Policy Changelog
Last updated: September 14, 2026
A record of every change to our published policies, including corrections.
| Date | Document | Change |
|---|---|---|
| 2026-09-14 | Privacy | What happens to a reported photo. Section 4 now says that when a shared image is reported, we may copy it — with its thumbnail, link page and puzzle settings — into separate storage only we can access, before reviewing the report, so it is not deleted while we work out what the law requires. If the law requires us to preserve it, we keep that copy for as long as the law requires; otherwise we delete it once our review is complete. The previous wording covered only content we were already legally required to keep. |
| 2026-09-11 | Privacy | Two corrections about Unsplash on the iPhone app. First, privacy.html said "the search feature" as though Pixzle operated it — corrected. The image search inside the iPhone app is a component Unsplash provides: their search field, their results, their request to their servers. What you type goes directly to Unsplash and is handled under their privacy policy, not ours. Second, the page did not previously say that choosing a photo causes the iPhone to fetch it from Unsplash's image servers — it does, and that request reaches Unsplash carrying your IP address and your app's user agent (which we do not receive). Also clarified that the Daily Puzzle image is served from our own content delivery network rather than fetched from Unsplash on demand, so opening the Daily does not send a request to them. Unsplash's row in the service-providers table has been widened to cover all three of these — Daily image, in-app image search, and image delivery. No collection changed. |
| 2026-09-03 | Changelog | Correction to the 2026-08-30 row. Two clauses in that row described iPhone changes in the present tense — the retention wording on the share screen, and enforced 24-hour expiry on links to shared solved puzzles. Both are in the pending iPhone build, not the one you can install today, and the row already hedged the report control the same way. The row has been rewritten to scope both to the next app update. No behaviour changed; only the description of when it ships. |
| 2026-09-03 | Content & Safety | Hedge added to the shared-puzzle visibility sentence. The page said a shared puzzle is visible only until it expires — 24 hours after you create it. Enforcement now refuses to redirect past the 24-hour mark, but the underlying image object is deleted by storage cleanup that can run up to a day later. The sentence now reads "about 24 hours after you create it, and deleted shortly thereafter", matching the hedge that has always been on the Privacy Policy's retention wording. No collection or retention changed. |
| 2026-08-30 | Privacy, Terms, Acceptable Use, Content & Safety | Consistency pass across the apps and the policies. The Privacy Policy now discloses, for iPhone as well as the web player, that analytics events include the identifier of a shared puzzle you opened — the association already existed on both, and was described for only one. The photo itself is still never sent to our analytics provider. Reporting: four sentences said the report control lives on the web player; the iPhone app now has one too, so they describe the control itself rather than where it lives. No new capability is claimed — the web player's control is unchanged and the iPhone one ships with the next app update. Separately, in the apps rather than in these documents: the web player carried a notice claiming shared content may be intended for adults and asking you to confirm you are 18, which contradicted the 13-and-up requirement stated here and in the iPhone app, and overstated how long links last; it has been replaced with the same Acceptable Use notice the iPhone app shows. The iPhone app's share screen said photos and links are deleted after 24 hours; links to puzzles made from photos are kept for up to ten days, as the Privacy Policy describes, so with the next app update it will say they expire after about 24 hours. Also with that update, links to shared solved puzzles will enforce that 24-hour expiry themselves rather than relying on storage cleanup, which could run up to a day later. No collection changed. |
| 2026-08-26 | All | Accuracy and clarity pass. Corrected: our curated image library is licensed from Adobe Stock, not Unsplash — Unsplash supplies the daily puzzle and in-app image search, and the Terms named the wrong license. Content & Safety said a report control is on every shared puzzle; it is on shared puzzles opened in the web player, and any puzzle can be reported by email. The web player's page said the link page for any shared puzzle lasts up to ten days; that is true of a puzzle made from a photo, and the page for a shared solved puzzle is deleted with its image after a day. Added: images you generate with Apple's Image Playground, and a fuller description of the web addresses our crash reporter receives. Section 6 no longer points at an in-app screen that has not shipped. Simplified the web player's page. No collection changed — only the accuracy and the clarity of its description. |
| 2026-08-22 | Privacy, Terms, Content & Safety, DMCA | Accuracy correction. We audited every published statement against the app's actual code and our providers' SDKs, rather than against earlier drafts of these documents, and found several claims that were wrong. Corrected: the Privacy Policy described the analytics device identifier on iPhone as randomly generated by the app and as resetting when you delete and reinstall — it is in fact Apple's identifier for vendor, which Apple issues and which persists across reinstalls while any of our apps remains installed. The policy also said we receive a player identifier from Game Center (we receive nothing), listed "location" among things we do not collect without explaining that IP addresses give our providers approximate location, and understated what crash reporting and advertising collect. The web player's policy page said it collected no personally identifiable information and did not mention its analytics or its cookie; both are now described. Terms of Service and the copyright page claimed we can block a device, which we cannot — Pixzle has no accounts. Content & Safety said a report does not tell us who you are; reports arrive by email and carry the sender's address. Added: a Cookies section and the retention schedule for shared images of solved puzzles. Section 6 describes how to request your data; if you cannot find the analytics identifier in the app, email us and we will help. No collection changed — only the accuracy of its description. |
| 2026-08-20 | All | Complete rewrite. Added Terms of Service, Acceptable Use Policy, Content & Safety Policy, and DMCA policy. Privacy Policy updated to describe advertising, crash reporting, Game Center, and image search; added GDPR section, data subject rights, and a clarified children's section. Age requirement for photo upload set at 13 |
| 2025-01-31 | Privacy Policy | Initial version |