Privacy policy
Last updated: 13 October 2026
This policy explains what Puzzleroo knows about you, why, and what you can do about it. We have tried to keep it short and plain. Puzzleroo is run from the United Kingdom, and UK data protection law applies.
Who is responsible
Puzzleroo is the data controller. You can reach us about anything in this policy at hello@puzzleroo.app.
What we collect
| What | When | Why |
|---|---|---|
| A random guest account number | The first time you visit | To remember your games, scores and streaks without asking you to sign up |
| Your games: guesses, hints used, time taken, result and score | When you play | To check your answers, keep your stats and streaks, build leaderboards and spot cheating |
| A display name | Only if you choose one | To show you on leaderboards and in leagues. It is public |
| A country | Only if you choose one | To show a flag beside your name and place you on that country’s board. It is public |
| An email address | Only if you create an account | To sign you in on other devices. We do not send marketing email |
| League memberships and any reports you send | When you join a league or report a player | To run leagues and review reports |
| Technical details: IP address, browser type, pages requested | On every visit | To deliver the site, keep it secure and stop abuse. Held briefly in server logs by our hosting providers |
We do not ask for your real name, date of birth, address or payment details, and we do not work out where you are from your IP address.
Our legal reasons
- To provide the service you asked for: running your games, account, leaderboards and leagues.
- Our legitimate interests: keeping the site secure, preventing cheating and abuse, and understanding in general terms how the site is used.
- Your consent: for advertising cookies and any non-essential cookies, once advertising is introduced. You will be asked first and can change your mind at any time.
Who we share it with
We do not sell your data. We use these companies to run the site:
| Company | What for | Where |
|---|---|---|
| Supabase | The database and sign-in system that hold your account and games | Ireland (EU) |
| Vercel | Hosting the website | Worldwide, including the United States |
| Cloudflare | The site’s domain name service, and a check that you are not a robot when you first choose a display name or create an account | Worldwide, including the United States |
| Resend | Sending sign-in emails | Ireland (EU) |
Where data leaves the UK, these companies rely on recognised safeguards such as adequacy decisions and standard contractual clauses. Other players can see your display name, country flag and scores if you have chosen a display name.
Advertising
Puzzleroo does not show adverts yet. When it does, they will be provided by Google AdSense. You will be asked for your choice in a consent banner first, no advertising cookies will be set before you choose, and this policy and the cookie policy will be updated to name the partners involved.
How long we keep it
- Your account and games are kept until you delete your account.
- Guest accounts that have not been used for 12 months are deleted.
- The detailed log of each guess is deleted after 30 days; the result and score remain.
- Backups of the database are encrypted and kept for up to 90 days. When you delete your account it leaves the live database at once and drops out of the backups as they expire.
Your rights
You have the right to:
- see your data: use “Download my data” on your profile page;
- delete it: use “Delete my account” on the same page;
- correct it: change your display name or country on your profile page;
- object to or restrict how we use it, or ask us anything else, by emailing hello@puzzleroo.app.
We will reply within one month. If you are unhappy with our answer you can complain to the Information Commissioner’s Office at ico.org.uk.
Children
Puzzleroo is for a general audience and is not aimed at children under 13. We do not knowingly collect email addresses from children under 13. If you believe a child has given us personal data, email us and we will remove it.
Changes
If this policy changes in a way that matters, we will say so on the site before the change takes effect. The date at the top shows when it was last updated.