This policy explains how Puzzle Pact handles information when you play puzzles, create an account, join a competition, or contact us.

An account is optional. Anonymous puzzle progress and preferences are stored on your device using browser local storage or app storage. Clearing that storage, using private browsing, or changing devices can remove or separate your progress. Visiting the website still generates technical information needed to deliver and protect the service.

For accounts, we collect your email address, chosen username, account identifier, and account-related timestamps. Supabase handles password authentication; passwords are stored as hashes, not readable passwords. Do not send us your password or confirmation links.

We store signed-in game results, including puzzle dates, completion status, guesses, elapsed time, and assistance indicators, along with group memberships, roles, invitations, and standings archives. If someone invites you by email, we may receive your email address before you create an account.

If you enable notifications in a supported installed app, we process a notification token, device platform, preferences, and delivery records. Support receives the information you include in messages. Hosting, authentication, and email providers may process IP addresses, browser or device details, and technical logs.

We use information to provide sign-in and account recovery, save results across devices, operate competitions and invitations, deliver requested notifications and service emails, answer support requests, and investigate abuse or technical problems.

Where local law requires a legal basis, we rely on providing the service you request, legitimate interests in maintaining and securing it, legal obligations, or consent where required. You can withdraw optional notification permission in device settings. Withdrawal does not undo earlier lawful processing.

We count daily visits, puzzle interactions, solved and ended games, and browsers that play again the following day. These counters help us improve the games and understand broad traffic sources such as Instagram or YouTube. The counter records contain only a date, source category, game, event type, and total; they do not contain account identifiers, emails, puzzle answers, full URLs, or a persistent visitor identifier.

This browser stores the current counting day, broad source, games counted that day, and the last day you played to reduce duplicate counts. We do not use that record to identify you across devices. Clearing storage, opting out, failed requests, multiple tabs, and private browsing can affect the totals. Aggregate totals are kept for up to 90 days of active collection; older totals are removed when the next count arrives.

You can turn usage counts off using the control on this page. We also turn them off when your browser sends Do Not Track or Global Privacy Control, or when browser storage is unavailable. Counts use our existing Supabase service; that provider still receives connection information needed to handle the request, as described above.

Your username identifies you to other players, including in username invitations. Members of your competitions can see membership and game results, including times, guesses, assistance status, and medals. Group administrators manage members and games. Avoid putting private information in usernames or group names.

Invitation recipients can see the inviting username and group name. Anyone you give a reusable invitation link to may use or forward it, so share links only with people you want in the group.

We use Supabase for accounts and stored game data, Vercel for website hosting, and Resend and Google Workspace for email services. Supported mobile notifications may also pass through Expo, Apple, or Google. These providers process information needed to deliver their services.

Information may be processed outside your country, where privacy laws may differ. We may disclose information when legally required or necessary to investigate abuse and protect users or the service. We do not sell personal information or use it for targeted advertising.

Browser or app storage keeps local puzzle progress, preferences, and sign-in sessions. Hosting and authentication providers may use cookies or similar tools for essential security and service delivery.

Account information and results are retained to support your account and competition history. Invitation expiry prevents use of an expired link; it does not necessarily erase the record. Technical logs and backups follow provider retention settings. We limit retention to service, security, dispute-resolution, and legal needs; contact us to request deletion or more information about retention.

We use access controls and our providers’ security features to protect information. No internet service or storage system can guarantee complete security.

You can change your username from Your competitions. To request access, a copy, correction, account deletion, or to raise a privacy concern, email support@puzzlepact.com. Where applicable, you may also request restriction, object to processing, withdraw consent, or complain to your local privacy regulator.

Describe your request and, if possible, write from your account email address. We may ask for proportionate information to verify ownership; never include passwords. Requests are handled by support, not automatically by opening an email link. We will explain any information we must retain and any effect on groups you administer. Backups may take additional time to expire, and copies already shared with other people may remain outside our control.

Puzzle Pact is a general-audience puzzle service, not a service directed specifically at children. We do not currently ask for a date of birth or verify age. This does not remove protections that apply to children under local law.

If you believe we hold information about a child where parental permission or other protection is required, contact support@puzzlepact.com. We will review the situation and take appropriate steps, which may include restricting the account or deleting information. Do not email identity documents unless support has explained a necessary, secure verification process.

We will update the date on this page when this policy changes and provide additional notice or seek consent where required for material changes. For privacy questions, contact Puzzle Pact at support@puzzlepact.com.