Privacy Policy
Last updated: June 2026
This game is offered by a publisher using the Puzzle Post platform. The publisher is the party responsible for processing your personal data (data controller). Puzzle Post acts solely on the publisher's instructions (data processor). For questions about your data, contact the publisher of this game directly.
Who can play?
You can play without creating an account. If you choose to register, additional personal data is collected as described below. An account lets you track your score history, appear on the leaderboard under your own name, and compete across sessions.
Data collected — registered users
| Data | Purpose | Retention |
|---|---|---|
| First name, last name | To identify you within the platform and personalise your experience. | Until you delete your account. |
| Username & display name | Login credential and public leaderboard name. | Until you delete your account. |
| Email address | Account management, password reset, and optional newsletter or marketing messages (only if you opted in). | Until you delete your account. |
| Password (hashed) | Secure login. Your password is never stored in plain text — only a one-way bcrypt hash is kept. | Until you delete your account. |
| OAuth identifier Google / Microsoft |
If you sign in via Google or Microsoft, we store a unique identifier from that provider to link your account. We receive your name and email from the provider. | Until you delete your account. |
| Profile photo optional |
Shown on your profile and leaderboard entry. | Until you remove it or delete your account. |
| Newsletter / marketing consent | To record whether you agreed to receive communications. | Until you delete your account or withdraw consent. |
| Game history | Your guesses, solve outcome, number of attempts, and time taken — used for your personal score history and the leaderboard. | Until you delete your account. |
Data collected — anonymous players
| Data | Purpose | Retention |
|---|---|---|
| Session ID anonymous |
A random identifier stored in your browser to remember your progress if you reload the page. Not linked to your identity. | 90 days, then automatically deleted. |
| Guest name optional |
If you choose to enter a name to appear on the leaderboard, that name is stored alongside your anonymous game result. | 90 days. |
| Game attempts & duration anonymous |
Guesses made, number of attempts, time taken, and outcome (solved / gave up). Used for aggregate statistics and the leaderboard. | 90 days. |
IP address & security logging
For security purposes, your IP address is logged when you log in, register, log out, change your password, or sign in via OAuth. It is also captured when a server error occurs. This data is used exclusively to detect abuse, block brute-force attempts, and investigate incidents — never for advertising or profiling.
IP address logs are retained for up to 12 months and are not shared with third parties.
Cookies & local storage
| Name | Type | Purpose | Expiry |
|---|---|---|---|
session_token |
Cookie (functional) | Keeps you logged in between visits. | 7 days |
nw_theme |
localStorage (functional) | Remembers your light / dark mode preference. | Persistent (browser storage, no expiry) |
No tracking or advertising cookies are placed. No consent banner is shown because the only cookies used are strictly functional.
Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Google Fonts | Loading typefaces used on the site. | Your IP address is sent to Google's servers. See Google's privacy policy. |
| Google Sign-In only if used |
Optional login via your Google account. | Google provides your name and email to us. See Google's privacy policy. |
| Microsoft Sign-In only if used |
Optional login via your Microsoft account. | Microsoft provides your name and email to us. See Microsoft's privacy policy. |
No advertising networks, analytics platforms, or social media trackers are used.
Legal basis (GDPR)
| Processing activity | Legal basis |
|---|---|
| Account registration and game history for registered users | Contract — Art. 6(1)(b) GDPR: necessary to deliver the service you signed up for. |
| Anonymous game statistics | Legitimate interest — Art. 6(1)(f) GDPR: allowing publishers to measure puzzle difficulty and participation. |
| Security and abuse logging (IP addresses) | Legitimate interest — Art. 6(1)(f) GDPR: protecting the platform and its users against fraud and attacks. |
| Newsletter / marketing emails | Consent — Art. 6(1)(a) GDPR: only sent if you explicitly opted in during registration. You can withdraw consent at any time. |
Your rights
Under GDPR you have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you.
- Right to rectification — correct inaccurate data via your account settings.
- Right to erasure — delete your account and all associated personal data.
- Right to data portability — request an export of your game history.
- Right to object — object to processing based on legitimate interest, including security logging.
- Right to withdraw consent — unsubscribe from marketing emails at any time.
To exercise these rights, contact the publisher of this game. You also have the right to file a complaint with your national data protection authority (in the Netherlands: Autoriteit Persoonsgegevens).
Security
All communication between your browser and our servers is encrypted (HTTPS). Passwords are stored as one-way bcrypt hashes and are never readable by anyone. The database is accessible only to authorised personnel at the publisher and Puzzle Post.
Changes to this policy
If we make material changes to this policy, we will update the date at the top of this page. Continued use of the platform after changes constitutes acceptance of the revised policy.
Questions?
Contact the publisher of this game for any privacy-related questions or data requests.