Privacy Policy

Last updated: 17 October 2026

Who this policy covers

This policy covers the Puzzark website, its printable PDF shop and online games. The publisher is LAMANE SAS. Contact [email protected] for questions about personal data.

Information used to provide the service

• Account information, such as your email address, optional name and a protected password hash, or details supplied by a sign-in provider you choose. We also record the last authenticated activity date and any inactivity notice or retention hold needed to apply our account-retention rules.
• Orders, purchased products, payment status and download-access information. Payment card entry is handled by Stripe; our application does not store full card numbers.
• Saved game progress, elapsed game time, favorites and achievements when you use account features. These are separate from anonymous usage counters.
• Reviews you submit. Reviews may publicly display your comment, rating, date and name or a masked version of your email address.
• Information you send when contacting us. Hosting and service providers may also process network information, including IP addresses and technical logs, to deliver and secure the service.

Purposes and legal grounds

Account, order, download and requested game features are used to provide the services you request and fulfil purchases. Required accounting records are processed to meet legal obligations. Security, abuse prevention and handling enquiries support our legitimate interests in operating and protecting the service. Where a separate feature requires consent, that consent must be obtained before that feature is activated.

Aggregate usage measurement

We count views and selected actions across the books, PDF shop and games sections as daily totals. Depending on the section, totals are grouped by product, game, difficulty, grid size, selected Amazon store, filter or click type. The selected Amazon store is not treated as your actual location. Book detail page totals also distinguish links marked with a supported lang parameter from other visits; only the book code, edition language and this category are retained, not the full URL or referring page.

These counters contain no visitor or account identifier, exact event timestamp, search text, puzzle answers or individual playing duration. They are not joined to accounts, orders or saved progress, and are not used for individual advertising profiles. A grid identifier may be sent to validate an action; only the game type, difficulty and size are retained in the counters.

The reporting window is 90 days. Older counters are removed by daily maintenance, with additional cleanup during collection. Do Not Track disables collection. GPC alone does not disable these internal counters, which involve no sale or sharing for advertising. Repeated visits and clicks may be counted again; these are not unique visitor or purchase counts.

Where we store data

Puzzark uses Hetzner for its server hosting. Data stored on this hosting infrastructure is located in the European Union, in Nuremberg and Falkenstein, Germany. See Hetzner’s privacy information.

Cloudflare and website delivery

Our website uses Cloudflare in front of the hosting infrastructure to route, deliver and protect web traffic. Cloudflare may process technical request data, such as IP addresses, request headers and security information, to provide these services.

Cloudflare operates a global network. Hosting our servers in Germany does not, by itself, mean that all processing by Cloudflare takes place in Germany or within the European Union. Processing locations depend on the Cloudflare services and regional settings in use. See Cloudflare’s Privacy Policy. This infrastructure processing is separate from our aggregate usage counters.

Transactional email

We use Brevo for transactional emails, such as order confirmations, download information and sign-in links. Cloudflare Email Service is our backup delivery option when Brevo is unavailable. This is an alternative sending service, not an archive of copies of every email. The provider used for a message processes the recipient’s email address, the message subject and content, and delivery-related information needed to send it.

These service emails support your purchases and account access. Email-provider processing is separate from our aggregate website counters. See Brevo’s Privacy Policy and Cloudflare’s Privacy Policy.

Other service providers and external sites

Payment processing uses Stripe. Hosting, file delivery and transactional email services process information needed to operate the website. If you choose an external sign-in provider, it processes the information needed for sign-in. Amazon purchases take place on Amazon under its own policies; affiliate links may identify Puzzark as the referring publisher.

The German storage locations above describe Puzzark’s Hetzner hosting. Processing by payment, email, file-delivery and sign-in providers is covered separately by their service arrangements. Their processing locations and any applicable international transfer safeguards remain to be confirmed in the final version of this notice.

Retention

We apply the following schedule. Some periods are legal requirements; others are limits chosen by LAMANE SAS for the stated purpose.

• Internal usage counters: 90 days, with daily cleanup.
• Accounts without purchases and their saved games, favorites, achievements and reviews: deletion after 24 months without activity, following a 30-day warning. Returning to the account during the warning period cancels this deletion.
• Purchased PDF access: the minimum account, purchase and download-access information is kept for the duration of the download access promised with the purchase. Account inactivity alone does not remove purchased access. Download records used to enforce purchase limits are retained for that purpose; associated IP addresses are cleared after six months.
• Invoices and accounting evidence: 10 years from the closing date of the relevant financial year, with access limited to accounting and legal needs.
• Ordinary support correspondence: 12 months after the enquiry is resolved.
• Transactional email copies and delivery logs: 30 days for copies and 90 days for delivery logs. Required accounting originals are retained separately under the accounting schedule.
• Security logs: six months, with restricted access.
• Backups: a rolling 30-day window. Deleted information may remain in protected backups until they expire; deletion instructions are reapplied if a backup is restored.

Where a legal obligation or an actual dispute requires longer retention, only the necessary records are kept in a restricted archive for the applicable period. Browser cookie durations are listed in our Cookie Policy.

Optional Google Analytics

With your consent, Google Analytics 4 helps us understand visits to public pages. It uses cookie identifiers and receives page-view events and technical browser or device information. These requests also expose network information to Google. This measurement is not anonymous and is separate from Puzzark’s internal daily counters.

Our page-view integration excludes account, cart, order and download routes. It strips search text, access tokens and other arbitrary URL parameters; only supported interface and edition language codes are retained. We do not send account details, order contents or puzzle answers to Google Analytics. Advertising storage, advertising personalization and Google signals are disabled.

You can refuse analytics or withdraw consent through “Cookie settings” in the footer without losing access to Puzzark. Your choice is remembered for 180 days. See the Cookie Policy for storage details and Google’s information about partner sites for its processing practices. Google’s processing is separate from our hosting in Germany.

Your rights

Depending on the applicable law, you may request access, correction, deletion, restriction or portability of personal data, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it. Some records may need to be retained to meet legal obligations. Contact us to make a request; information needed to verify your identity may be requested.

You may also complain to your data protection authority. In France, see the CNIL.

Updates and contact

This notice may change as features or service providers change. The revision date appears above. See Contact for support and privacy enquiries.