Privacy Policy
How we collect, protect, and process data
1. Data Controller
The responsible party for data processing on this website is:
2. Hosting & Content Delivery
This website is hosted on Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
When you visit this website, Cloudflare automatically processes connection data (server logs) transmitted by your browser. This includes:
- Your IP address
- Browser type and version
- Operating system used
- Referrer URL
- Time of the server request
This processing is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically secure, fast, and error-free operation of the website.
Cloudflare is certified under the EU-U.S. Data Privacy Framework, ensuring a level of data protection compliant with GDPR. For details, please see the Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/
3. User Accounts, Local Storage & Cookies
Guest Sessions
If you play as a guest, your puzzle progress, daily streaks, settings (sound, language), and local stats are stored locally in your browser (LocalStorage). No user profile data is sent to our servers for guest sessions.
Registered Accounts
If you choose to create an account, we process your email address and securely hashed password (or third-party OAuth profile identifiers) to maintain your login session and synchronize your game statistics and multiplayer history across devices (Art. 6(1)(b) GDPR).
We only use essential cookies and browser storage required for authentication and site functionality (e.g. keeping you logged in and remembering your audio/theme preferences).
4. Advertising & Google AdSense
We may display advertisements on our landing page provided by third-party advertising networks, primarily Google AdSense.
Third-Party Cookies & Tracking
Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites on the internet. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet.
Opting Out of Personalized Advertising
Users may opt out of personalized advertising by visiting Google Ads Settings or third-party opt-out services:
- Google Advertising & Privacy Policy
- Google Ads Settings
- Digital Advertising Alliance (DAA) Opt-Out
- European Interactive Digital Advertising Alliance (EDAA)
In regions subject to the GDPR, ePrivacy Directive, or CCPA, you can manage or withdraw your consent for advertising cookies at any time through our consent management banner.
5. Rights of the Data Subject
Under GDPR, you have the following rights regarding your personal data processed by us:
- Right of Access (Art. 15 GDPR): Right to obtain information about your processed data.
- Right to Rectification (Art. 16 GDPR): Right to request correction of inaccurate data.
- Right to Erasure (Art. 17 GDPR): Right to request deletion of your personal data ("right to be forgotten").
- Right to Restriction (Art. 18 GDPR): Right to restrict processing of your data.
- Right to Data Portability (Art. 20 GDPR): Right to receive your data in a structured, commonly used format.
- Right to Object (Art. 21 GDPR): Right to object to data processing based on legitimate interests.
- Right to lodge a complaint (Art. 77 GDPR): Right to lodge a complaint with a supervisory authority.
To exercise any of these rights, you can contact us at any time using the email address provided above.