Privacy

A Solver Account stores your email address, a securely hashed password, session records (including IP address and browser details used for account security), and the Challenges you save or complete. Decipher uses this data only to provide secure sign-in and your private Personal Page. Account emails confirm addresses, recover passwords, approve sensitive changes, and report security-relevant changes; they are not marketing emails.

Storage and processors

The application runs on Vercel, stores account data in Neon Postgres, and uses Google Workspace to deliver transactional account email. When a password is created or replaced, Decipher asks Have I Been Pwned whether the first five characters of its cryptographic hash appear in known breaches; the password is not sent. These services may process data outside your country under their applicable contractual safeguards. Decipher has no advertising, marketing trackers, or optional analytics.

Retention and your choices

Account data is kept while the account is active. An ordinary Solver can permanently delete their Solver Account and its Saved and Completed Challenges from Account settings. Challenge Authors require operator assistance so authored work is handled deliberately. Short technical retention may still be necessary for security or legal obligations. You may request access or correction by emailing contact@decipher.nu from the account email.