Privacy Policy

This policy explains how Sylphx Limited ("we", "us", or "our") collects and uses personal data when you use Puzzled, and the rights you have over it.

Sylphx Limited (registered in England and Wales, company number 16438428; registered office: 128 City Road, London EC1V 2NX, United Kingdom) is the controller of your personal data under the UK GDPR and the Data Protection Act 2018.

We collect the following types of information:

• Account information: name, email address, and profile picture
• Game data: scores, statistics, streaks, and game history
• Payment information: Sylphx Money, the payments service of Sylphx Limited, and its payment processor Stripe collect your card details; we receive your subscription status, amounts, dates and payment references
• Technical data: IP address, browser type, and device information
• Error reports: when a page or our server fails, we record the error message, stack trace and page path (never the query string, email addresses or anything you typed) in our own error-monitoring service, to find and fix the fault
• Referral and ad tags: if you arrive through a link that carries campaign tags (utm_ parameters or a referral id, for example from another Sylphx product), and you have accepted analytics cookies, we keep those tags for 30 days in a first-party cookie and store them with your account if you sign up. If you arrive from a Google ad and have turned on advertising cookies, we keep the ad click id for 90 days in the same cookie and pass it only to the payment record of a subscription you start, not to your account. We use them to know which link or ad brought you, and we do not sell them.

We use your data for these purposes, on these legal bases under the UK GDPR:

• To provide Puzzled, your account, Puzzled Plus and the family plan, and to answer your requests: performance of our contract with you
• To keep Puzzled secure, prevent cheating, abuse and fraud, fix faults, and understand and improve our games: our legitimate interests in running a safe, working and improving service
• To send you messages about your account, subscription and changes to Puzzled: our contract with you and our legitimate interests
• To measure how Puzzled is played, which links and ads bring players, and whether they sign up or subscribe, using analytics, advertising measurement and the referral cookie: your consent (analytics and advertising are separate choices), which you can withdraw at any time with Change cookie choice in the Cookies section
• To keep tax and accounting records, respond to lawful requests, and establish, exercise or defend legal claims: our legal obligations and our legitimate interests

We do not sell your personal data. Players without Puzzled Plus may see advertising on the archive and result screens (never during a puzzle), served by Google AdSense; the ad is shown, and advertising cookies are set, only if you turned on advertising cookies.

When you subscribe, Sylphx Money (operated by Sylphx Limited) and its payment processor Stripe process your payment; we never receive your full card number. We record that you asked for access to start at once when you subscribed. Sylphx Money keeps a record of your subscription, payments and refunds (amounts, dates and payment references) for as long as tax and accounting law requires. If you delete your account, these records are kept without your player ID.

We share personal data with service providers that process it for us under contract, including:

• Sylphx Money - Payment processing and subscriptions
• Stripe - Payment processing
• Google - Authentication
• Google Analytics, Google Ads - Analytics and advertising measurement (only after you consent)
• Sylphx Limited - Email delivery (sign-in and verification mail)

We may also share data with our hosting providers, professional advisers, authorities where the law requires it, and a buyer or successor if our business or Puzzled is sold or reorganized.

Some of our providers process data outside the UK. Where they do, we rely on UK adequacy regulations or on safeguards the law approves, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. Contact us for a copy of the relevant safeguard.

We keep your account and game data while your account is open. When you delete your account, we erase your game history, stats, streaks, profile and settings. We keep other data only for as long as we need it for the purposes above, including to meet legal obligations, prevent fraud and abuse, and establish or defend legal claims. Backups and logs are overwritten in the normal course of operation.

We use cookies that are strictly necessary to sign you in, keep Puzzled secure and remember your settings. We use analytics and the referral cookie only if you accept analytics, and advertising measurement only if you separately turn on advertising in Settings; nothing is pre-selected and declining costs you nothing.

One more cookie remembers which site notices you have closed or already seen: puzzled_dismissed_notices. It is strictly necessary, set by us (first-party) and kept for one year; it holds only the ids of those notices, no personal data, so it is set without asking and is not used for analytics. Another strictly necessary first-party cookie, puzzled_currency, remembers the currency you pick on the pricing page (for example GBP or USD) for one year; it holds only that currency code, no personal data, and is not used for analytics.

If Google Analytics or Google Ads is switched on for this site, it loads only after you have said yes: Google Analytics for analytics, and Google Ads to measure whether an ad led to a sign-up or a purchase, with the plan and price but no name or email. We turn off ad personalisation and Google signals, and send Google only public page addresses. You can withdraw at any time with the button below, which also deletes the Google cookies.

Change cookie choice

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Ask us to restrict how we use your data
• Object at any time to our use of your data based on our legitimate interests, and to any direct marketing
• Withdraw your consent at any time, where we rely on it, without affecting use before you withdrew
• Complain to us, and to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we handle your data

We answer requests within one month, which the law allows us to extend by up to two further months for complex or numerous requests. We make reasonable and proportionate searches, and we may charge a reasonable fee for, or refuse, a request that is manifestly unfounded or excessive.

Puzzled accounts are for people aged 13 and over. If we learn that we hold an account of a child under 13, we may close it and delete its data. We do not profile children for marketing.

We protect personal data with appropriate technical and organizational measures, but no service is completely secure. If a personal data breach occurs, we notify the Information Commissioner's Office where the law requires, and we tell you directly where the breach is likely to result in a high risk to your rights and freedoms.

We may update this policy. We post the new version on this page with a new date. If we plan to use your personal data for a new purpose, we tell you before we do.

For privacy-related inquiries, contact us at:

hi@puzzled.gg

+44 333 335 7935