Who is responsible for this site
Controller: Pablo Estañ Lloret. For any privacy question you can write to pabloestan135@gmail.com.
Short version: this site does not track you on its own and, as long as you only read it or use the timer, nothing of yours leaves your device. It only leaves if YOU decide to publish a result on the leaderboard, and then exactly what you see published is what leaves. It does show Google advertising, and that advertising does use cookies. The details are below.
August 1, 2026
Controller: Pablo Estañ Lloret. For any privacy question you can write to pabloestan135@gmail.com.
Cubetta sets no cookies of its own. The only cookies you may find here are the ones from Google's advertising, explained in the next section.
Two things are stored in your browser, in this site's own local storage: the language you pick (“cubetta.lang”) and your timer results with their scramble (“cubetta.solves”). Neither ever leaves your device, neither is sent to any server and neither can identify you. You can delete them whenever you like: the times one by one from the timer itself, or all at once by clearing the site data in your browser.
If you publish on the leaderboard, a third one is added: an anonymous Firebase account, which is a random identifier with no name or email behind it. It serves two purposes and only two: stopping you from publishing more than one result at a time, and making sure only you can edit or delete yours. You do not need to activate it or do anything; it is created on its own the first time you publish, and if you never publish it never exists.
This site is free and is paid for with Google AdSense advertising. Google, as a third-party vendor, uses cookies and device identifiers to decide which ads to show you, to avoid repeating the same one over and over and to measure whether they work. When an ad loads, Google receives your IP address.
If you are in the European Economic Area, the United Kingdom or Switzerland, you will see a notice asking you to accept or reject personalised advertising before any ad loads. You can change that decision at any time from the same notice. Rejecting it locks you out of nothing: the site works exactly the same.
You can turn off Google's personalised advertising at any time at google.com/settings/ads, and read how Google handles data from sites that use its services at policies.google.com/technologies/partner-sites.
It is the only part of this site that stores anything outside your device, and only if you expressly ask for it. When you publish, the following is stored: the nickname you choose, your average of five, the five times behind it, the five scrambles, the date and your browser's anonymous identifier. Your IP is not stored alongside the result, nor your email, nor your exact age, nor anything you do not see published.
The legal basis is your consent (GDPR art. 6.1.a), given when you press publish and withdrawn by deleting your entry, with one button and no explanations. The data is stored in Firestore (Google) in a data centre in Belgium, inside the European Union, and kept for as long as your result stays published.
A piece of advice, not an obligation: do not use your real name as your nickname. A nickname exists precisely so that you do not have to, and if you are a minor, all the more so.
It is optional and reserved for people aged 18 or over. If you choose to verify your result, the browser records the session with your camera, without sound, and that recording is uploaded so that a person can check it. You are asked explicitly about being of age before the camera is turned on, and that answer is stored: the GDPR requires being able to demonstrate that consent was obtained, not merely to have asked.
The recording is NEVER published. It does not appear in the table, it cannot be linked to and not even you can download it again: the server rules prevent everyone from doing so except the person moderating. What becomes public is the verified badge, never the video.
It is kept in Google storage also located in Belgium, and retained for as long as your result stays published, because it is what backs it up. When you delete your entry, the video is deleted with it in the same action, without you having to ask. And if you change your times, the verification lapses: the recording proved the result that was recorded.
If you are a minor, do not use this feature and do not record. The unverified table is open to everyone and requires no camera at all.
Exactly two are involved: Google, which serves the ads, and Google (Firebase Hosting), which hosts the site. Nothing else. There is no analytics, no social buttons, no embedded videos and no tracking pixels from anyone.
The web fonts are still served from this same domain and not from Google Fonts, so that your IP address does not reach anyone through that route.
Like any website, the provider hosting it (Google (Firebase Hosting)) automatically records technical request data: IP address, date and time, browser and page requested. This exists so the site works and so abuse or attacks can be spotted; it is kept by the provider under its own policy. It is not used to profile you and is not combined with anything else.
The GDPR gives you the right to access, rectify, erase, restrict or object to the processing of your data, and to data portability. If you have never published on the leaderboard, there is literally nothing of yours to hand over or delete. If you have published, you exercise the most important right yourself and without asking permission: the delete button removes your entry, along with its recording if there was one, immediately. For anything else, write to pabloestan135@gmail.com; and you can always complain to the Spanish Data Protection Agency or the authority in your country.
This page is updated BEFORE anything changes, not after. If analytics, another external service or any new processing is ever added, it will be described here with the appropriate consent notice. The date above says when it was last reviewed.