Privacy Policy

Information we collect

When you create an account, we collect your email address and any profile information you provide through Clerk, our authentication provider. We also collect gameplay data including completed puzzle sessions, completion times, and mistake counts. Active in-progress puzzle state (board, notes, timer, mistakes) is stored on your device in browser localStorage and sent to our servers only when a puzzle ends (win or loss); we do not sync in-progress state across devices.

Studio (creator product) data

When you use Puzzlumina Studio to generate puzzle packs, we additionally store the following so we can deliver, license, and audit your output:

• Batch configuration — the puzzle settings you submit (type, size, difficulty, layout, typography, output formats).
• Generated pack metadata — file names, sizes, checksums, expiry dates, and storage references for each output file (PDF, PNG, SVG, answer key, ZIP, manifest JSON).
• Purchase and license records — the Stripe checkout session id, the issued license version, and whether the output is preview (watermarked) or royalty-free commercial.
• Entitlement records — which Studio subscription funded a batch, and (for customers who previously bought a one-time pack) the puzzles remaining on that pack.
• Pack-prepay temporary records — when a guest buys a pack without signing in first, we store the email Stripe collected at checkout until the payment webhook confirms the order so we can auto-create your account; the temporary record is consumed once the order completes.

How we use your information

We use your information to provide the Puzzlumina service: generating personalised statistics, saving completed puzzles, managing Play and Studio subscriptions, delivering Studio packs you have purchased, issuing and tracking commercial licenses, and improving the product. We do not sell your data to third parties.

Data storage

• Account & authentication — Clerk.
• Gameplay & Studio metadata — PostgreSQL database hosted on our self-hosted server infrastructure. No generated puzzle files are stored in the database.
• Generated puzzle files — Cloudflare R2 object storage. Files are accessed via short-lived signed download URLs.
• Payments — processed by Stripe; we never receive or store your full card details.
• Transactional email — sent via Resend (e.g. the Studio pack confirmation email; replies to support requests). We do not run marketing email campaigns.

We take reasonable measures to protect your data from unauthorised access. Active in-progress puzzle state stays on your device in browser localStorage; clearing your browser data removes it.

Data retention

• Account, gameplay, and Studio metadata — kept while your account exists; removed when you delete your account (see “Your rights & choices” below).
• Generated Studio files — free/preview output is deleted after 7 days; purchased output is kept for 365 days, then deleted.
• Payment-event records — we keep a log of Stripe billing events for accounting, fraud prevention, and to make payment processing reliable. Personal fields inside those records (email, name, address) are automatically removed after 90 days; the non-personal remainder (transaction ids, amounts, dates) is retained, including after account deletion, as financial record-keeping.
• Guest identifier cookie — expires after 30 days (see the Cookie Policy).
• In-progress puzzle state — lives only in your browser’s localStorage; we never receive it. Clearing browser data removes it.

International transfers & processors

We rely on a small set of service providers that may process your data outside your country of residence, including in the United States: Clerk (authentication), Stripe (payments), Cloudflare (content delivery, security, and R2 file storage), Google (advertising and analytics, subject to your cookie consent), and Resend (transactional email). Each provider processes data under its own privacy terms and contractual safeguards. We do not sell your personal data.

Approximate location & pricing

When you visit our pricing pages, our infrastructure provider (Cloudflare) derives a country code from your IP address. We use that country code only to display prices in a familiar currency. We do not store your IP-derived location, and it is not linked to your account.

Children’s privacy

Puzzlumina is not directed at children under 13 (or a higher minimum age where local law requires one, such as 16 in parts of the European Economic Area), and we do not knowingly collect personal data from children. Anyone can play puzzles as a guest without an account — guest play needs no personal information. If you believe a child has created an account, contact us at [email protected] and we will delete it.

Cookies

We use essential cookies for authentication and session management. We also use Google Ads and Google Analytics (via the gtag.js tag) to measure the performance of our advertising campaigns, attribute conversions, and enable remarketing. Google may set its own cookies and process limited data (such as your IP address, device information, and pages visited) in accordance with its own privacy policy. You can opt out of personalised advertising through Google’s Ads Settings. See our Cookie Policy for details.

Your rights & choices

Depending on where you live (for example under the GDPR, UK GDPR, or CCPA/CPRA), you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — update your email or profile details at any time through your account settings (managed by Clerk).
• Deletion — delete your account yourself from Account → Delete account. This cancels any active subscription, removes your puzzle history, stats, and Studio data from our database, deletes your generated Studio files from storage, and removes your sign-in identity. Payment-event records are retained in the reduced, de-identified form described under “Data retention”.
• Portability & objection — request your data in a portable format, or object to a particular use of it, by contacting us.

To exercise any of these rights, email [email protected]. We respond within the timeframes required by applicable law, and we never discriminate against you for exercising a privacy right. For advertising cookies, you can change your consent at any time from the Cookies page.

Contact

For privacy-related requests, please email us at [email protected] or use our contact form.