Legal

Privacy Policy

Last updated: 2026

Information we collect

When you create an account, we collect your email address and any profile information you provide through Clerk, our authentication provider. We also collect gameplay data including completed puzzle sessions, completion times, and mistake counts. Active in-progress puzzle state (board, notes, timer, mistakes) is stored on your device in browser localStorage and sent to our servers only when a puzzle ends (win or loss); we do not sync in-progress state across devices.

Studio (creator product) data

When you use Puzzlumina Studio to generate puzzle packs, we additionally store the following so we can deliver, license, and audit your output:

  • Batch configuration — the puzzle settings you submit (type, size, difficulty, layout, typography, output formats).
  • Generated pack metadata — file names, sizes, checksums, expiry dates, and storage references for each output file (PDF, PNG, SVG, answer key, ZIP, manifest JSON).
  • Purchase and license records — the Stripe checkout session id, the issued license version, and whether the output is preview (watermarked) or royalty-free commercial.
  • Entitlement records — which Studio subscription funded a batch, and (for customers who previously bought a one-time pack) the puzzles remaining on that pack.
  • Pack-prepay temporary records — when a guest buys a pack without signing in first, we store the email Stripe collected at checkout until the payment webhook confirms the order so we can auto-create your account; the temporary record is consumed once the order completes.

How we use your information

We use your information to provide the Puzzlumina service: generating personalised statistics, saving completed puzzles, managing Play and Studio subscriptions, delivering Studio packs you have purchased, issuing and tracking commercial licenses, and improving the product. We do not sell your data to third parties.

Data storage

  • Account & authentication — Clerk.
  • Gameplay & Studio metadata — PostgreSQL database hosted on our self-hosted server infrastructure. No generated puzzle files are stored in the database.
  • Generated puzzle files — Cloudflare R2 object storage. Files are accessed via short-lived signed download URLs.
  • Payments — processed by Stripe; we never receive or store your full card details.
  • Transactional email — sent via Resend (e.g. the Studio pack confirmation email; replies to support requests). We do not run marketing email campaigns.

We take reasonable measures to protect your data from unauthorised access. Active in-progress puzzle state stays on your device in browser localStorage; clearing your browser data removes it.

Cookies

We use essential cookies for authentication and session management. We also use Google Ads and Google Analytics (via the gtag.js tag) to measure the performance of our advertising campaigns, attribute conversions, and enable remarketing. Google may set its own cookies and process limited data (such as your IP address, device information, and pages visited) in accordance with its own privacy policy. You can opt out of personalised advertising through Google’s Ads Settings. See our Cookie Policy for details.

Contact

For privacy-related requests, please email us at [email protected] or use our contact form.