Privacy Policy
Last updated: 2026-11-01
1. Data we collect
- • No personal data required to play. PuzzleVerse is guest-first — you can solve puzzles, track progress, and earn PVC without an account.
- • Account data (optional): If you sign in, we store your display name, email (hashed), and preferences.
- • Gameplay data: Puzzle completions, times, hints used, streak, XP, PVC balance — stored locally (guest) or server-side (signed in).
- • Analytics events (consent-gated): Aggregated, pseudonymous events like `game_completed`, `daily_completed` — no puzzle answers, no personal identifiers.
- • Uploads: Images for custom jigsaws — EXIF/GPS stripped, processed to WebP ≤ 2 MB, stored only if you choose "Unlisted" or "Public".
2. How we use your data
- • Enable cross-device sync (account holders only)
- • Power leaderboards, streaks, PVC economy, badges
- • Improve the product via aggregated analytics (consent required)
- • Enforce community guidelines (moderation)
- • Comply with legal obligations
3. Storage & retention
- • Guest data: localStorage / IndexedDB on your device. You control it — clear anytime.
- • Account data: Encrypted at rest in managed Postgres (Supabase). Retained while account is active.
- • Analytics events: 13 months max, then auto-deleted.
- • Uploaded images: Retained while puzzle is published; deleted if you delete the puzzle.
4. Children's privacy (Kids Zone)
PuzzleVerse includes a dedicated Kids Zone with stronger protections:
- • No accounts required or permitted for children
- • No free-text input, no UGC, no named leaderboards
- • No tracking, no personalized ads
- • No external links without a parent gate
- • Parent information page at /parents
5. Your rights
- • Access / Export: Download your data (JSON)
- • Correction: Edit profile in Account settings
- • Deletion: Delete account (with confirmation + cool-off)
- • Consent withdrawal: Cookie preferences
6. Third-party services
- • Supabase: Auth, database, storage (EU/US regions)
- • Analytics: Plausible/Umami (consent-gated, no personal data)
- • Ads: AdSense/mediation (consent-gated, non-personalized by default)
- • CDN: Cloudflare (performance, security)
7. AI-generated content
Some puzzle text, images, and hints are AI-assisted and human-reviewed. AI-generated images carry C2PA content credentials where tooling allows. See our About page for details.
8. Contact
Questions? Contact us or email privacy@puzzlever.se.