Privacy Policy

Information we collect

• Account details. When you sign up we store your email address, a display name you choose, and your password. Passwords are never stored in plain text. Only a securely hashed version is kept.
• Sign-in security data. To keep accounts secure we record sign-in timestamps, sign-in counts, and the IP address used at sign-in.
• Gameplay data. As you play we store your puzzle attempts, solve times, mistakes, completion status, personal bests, and achievements. This powers your stats, history, and the leaderboards.
• Purchase records. If you buy a one-time unlock we store a record of the purchase: what you bought, the amount, the currency, the status, and the date. We do not see or store your full card number. See Payments below.
• Analytics information. We use Google Analytics to collect page URLs and titles, session activity, approximate location, browser and device information, and interactions with puzzle unlock messages. Google Analytics uses a pseudonymous identifier stored in a cookie named _ga to distinguish browsers and sessions. We do not intentionally send your email address, display name, or account ID to Google Analytics.

How we use your information

• To create and maintain your account and let you sign in.
• To run the games and show your stats, history, personal bests, and achievements.
• To rank entries on leaderboards.
• To keep the service secure and prevent abuse.
• To send account-related email such as password resets.
• To send occasional announcements about new puzzles and site features.
• To understand how people use the site and improve its puzzles and features.

Information shown publicly

Leaderboards display your display name alongside your solve times to other players. Your email address and other account details are never shown publicly. If you prefer not to be identifiable, choose a display name that is not your real name. You can change it anytime on your profile.

Cookies and analytics

We use essential cookies to keep you signed in and to operate the site securely. These are required for signed-in features to function.

We also use Google Analytics to understand visits, puzzle usage, and interactions with unlock messages. Google Analytics uses cookies such as _ga to distinguish browsers and sessions. Google processes this information under Google's privacy policy.

Payments

Puzzle Lair is free to play. Some puzzle types offer a one-time purchase that unlocks their full catalog. There is no subscription, ever.

Payments are handled by Stripe, our payment processor. You enter your card details on Stripe's secure checkout, not on our servers, so we never see or store your full card number. Stripe receives information entered during checkout along with transaction and technical information, such as the amount, browser or device information, and IP address. Stripe uses this information to process payments and prevent fraud, and may collect some checkout information even if you do not complete the purchase. Stripe tells us the product, amount, currency, status, date, payment references, and receipt information we need to grant and support your unlock. Stripe's handling of this information is governed by Stripe's privacy policy.

Email

We send necessary account emails, such as password resets. Announcement emails are enabled by default when an account is created, and we may occasionally use them to tell you about new puzzles and site features.

You can turn announcement emails off in your profile settings or use the unsubscribe link included in each announcement. Turning off announcements does not prevent necessary account emails. We will never sell or rent your email address.

Service providers

We use service providers to operate Puzzle Lair. These include Google Analytics for site measurement, Stripe for payments and fraud prevention, and providers for hosting, database backups, and email delivery. They may process information as needed to provide those services under their terms and privacy policies. We do not sell or rent your personal information or gameplay data.

Learn more in Google's privacy policy and Stripe's privacy policy.

Your choices and rights

• Update your details. You can change your display name and password from your profile settings.
• Control analytics. You can configure your browser to block or delete analytics cookies. You can also install the Google Analytics opt-out browser add-on.
• Delete your account. You can permanently delete your account at any time from your profile settings. Deleting your account removes your account details and your gameplay data from our active systems.
• Questions or requests. Email us and we will help.

Data retention

We keep your account and gameplay data for as long as your account is active. When you delete your account, that data is removed from our active systems. Purchase records are retained for receipts, refunds, fraud prevention, and accounting, and are disconnected from your deleted account. Routine backups may retain copies for a limited time before they are overwritten.

Google Analytics data is retained separately according to our Analytics property settings and Google's policies. Because it is not linked to your Puzzle Lair account ID, deleting your account does not automatically identify or delete the pseudonymous Analytics data associated with your browser.

Children

Puzzle Lair is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy as the site evolves. When we make material changes, we will update the "Last updated" date above.

Contact

Questions about this policy or your data? Email ChestertonTechnologies@gmail.com.