Privacy Policy

This Privacy Policy explains how Puzzle Painter collects, uses, shares, and deletes information when you use the Puzzle Painter mobile game, account website, competitions, purchases, and related services. You must be at least 13 years old to create an account.

Information we collect

• Account information: email address, account identifier, chosen player name, four-digit player tag, age confirmation, and sign-in provider information when you use email, Apple, or Google sign-in.
• Game information: campaign progress, tutorials, credits, lives, boosters, purchases, subscriptions, ad rewards, private pixel puzzles, settings, moderation status, gameplay attempts and outcomes, time spent in game modes and app areas, and virtual-item spending.
• Competition information: submitted pixel drawings, prompt and category, votes, reports, awards, public leaderboard totals and ranks, and artist-hide preferences. Approved entries may be shown to other players for voting or reused as community challenge levels.
• Trust and moderation information: account standing, general standing changes, trust-event history, score-formula version, report impact and outcomes, reporter-accuracy history, standing snapshots attached to submissions, profile-eligibility status, moderation alerts, appeals, and administrator adjustments.
• Uploaded images: pixel conversion happens on your device. An encrypted copy of an original image may be temporarily uploaded to a private abuse/review vault. Your personal replay libraries keep the reduced pixel colors, not the original image.
• Technical information: installation-scoped identifiers, app/platform version, security and request metadata, error information, timestamps, coarse service-area request and transferred-byte totals, and approximate active-session time needed to operate, secure, rate-limit, troubleshoot, and identify unusual resource use. Resource records do not contain request contents or individual URLs.
• Notification information: your notification choices and, for signed-in devices that enable remote alerts, a device-scoped push token, platform, app build, locale, and time zone. Smart reminder timing uses app-open hours and notification taps stored only on your device; that timing history is not sent to us.
• Purchase and ad information: store product and transaction identifiers, entitlement status, currency adjustments, rewarded-ad claims, and information needed to investigate an ad report. We do not receive your full payment-card details.
• Support information: bug reports you choose to submit, including your description, reproduction steps, app version, platform, current app screen, and device or browser description. Artwork and uploaded images are not attached to bug reports automatically.

How we use information

We use information to create and secure accounts; save progress; deliver purchases, subscriptions, rewards, and game features; operate competitions; review private uploads and public submissions for abuse; respond to reports; prevent fraud and duplicate rewards; provide support; and maintain and improve Puzzle Painter. When you opt in, we also use notification information to schedule the reminder categories you select and deliver time-sensitive account, competition, safety, or publisher alerts. We use aggregated gameplay and economy measurements to understand level difficulty, where players stop, which modes are used, and how the in-game economy performs so we can improve and balance the game. Administrators may send a private, one-way account notice for moderation or support; players cannot use this feature to contact one another.

Account standing and moderation prioritization

Puzzle Painter uses an account-standing system to help prioritize private moderation review and decide whether a player may opt in to a public Trusted Artist Profile. Standing may reflect sustained play, unique level completion, constructive competition activity, approved submissions, awards, verified purchases, report outcomes, confirmed rule violations, and reversible administrator adjustments. A score snapshot is preserved with each submission so reviewers can compare standing at submission time with current standing.

Reports can temporarily reduce the reported account’s standing while a human review is pending. If a report is dismissed, the temporary reduction is restored. Report impact can vary based on the reporter’s standing and accuracy history; clearly false or malicious reporting can reduce the reporter’s standing. We do not reveal reporter identities or exact private anti-abuse calculations to the reported player.

Automated rules may flag sharp standing changes, negative standing, overdue cases, priority-review requests, report patterns, or community-moderator emergency actions. These rules sort and escalate work for human review; they do not make the final decision to remove content, impose a penalty, ban an account, or resolve an appeal.

Public Trusted Artist Profiles require the current eligibility threshold, player opt-in, and no active safety freeze. Eligibility is removed immediately when those conditions are no longer met. Qualifying artists can hide their own profile. An administrator can freeze a profile without changing its standing, and a community moderator can use a limited, temporary emergency hide that is automatically escalated to the administrator. Community moderators do not receive administrator access or authority to punish players.

Guests and signed-in accounts

Guest progress is attached only to the guest account on the local device and can be lost if the app is deleted or local data is corrupted. When a guest creates their first account, eligible guest progress and verified purchases may be transferred once to that account. Signed-in progress is stored with the account and can be restored after reinstalling and signing in again.

Images and retention

Original review images are encrypted on the device with a unique file key before being uploaded directly to a private Backblaze B2 vault. Backblaze receives ciphertext, not the plaintext image or its usable decryption key. Supabase stores the reduced puzzle and the control information needed for private review, retention, and key recovery.

• Encrypted review data is permanently deleted after 30 days.
• Incomplete uploads are removed after one hour.
• Account deletion permanently deletes unflagged account data within 24 hours.
• Content that is flagged for abuse, fraud, safety, or legal review may be held temporarily outside the 24-hour account-deletion window.
• Trust and moderation records are retained while the account is active and as needed to operate standing, review reports and appeals, detect coordinated abuse, preserve reversible audit history, and protect the service. They are deleted with unflagged account data after account deletion, except when a temporary safety, fraud, abuse, or legal hold applies. De-identified aggregate measurements may be retained after they can no longer identify an account.
• Gameplay and economy analytics are grouped into hourly measurements and retained for up to 12 months. These measurements do not contain artwork, uploaded images, request contents, or payment-card details.

Ads, purchases, and analytics

Puzzle Painter uses contextual, frequency-capped, and optional rewarded ads. The app requests non-personalized or limited ads, does not request Apple’s IDFA or App Tracking Transparency permission, and disables Google’s publisher first-party identifier. AdMob may still process device, network, consent, and ad-event information under Google’s policies to deliver, secure, measure, and limit ads.

Puzzle Painter records coarse gameplay, app-area time, level outcome, credit-spend category, and verified product-event measurements. These events are batched with an existing periodic service heartbeat rather than transmitted after every action. Store-revenue figures shown in internal analytics are estimates; Apple, Google, and RevenueCat remain authoritative for financial records.

Service providers

We use service providers only as needed to operate Puzzle Painter, including Supabase for authentication and authoritative application data; Backblaze B2 for encrypted private image storage; Oracle Cloud for this account and policy website, encrypted private replay objects, cached public game data, and operational gameplay analytics; Cloudflare for domain routing and website delivery and security; Apple and Google for sign-in and app-store services; Apple Push Notification service for enabled iOS remote alerts; Google AdMob for ads; RevenueCat for purchase and subscription infrastructure; and Resend and Amazon SES for transactional account email. Their handling of information is also governed by their own privacy terms.

Sharing and public content

We do not sell personal information. We may disclose information to the providers above, when you choose to publish an approved competition entry, to protect users and the service, to investigate abuse or fraud, or when legally required. Competition entries remain hidden until the applicable review and publishing stage. Public player IDs and aggregate competition results may appear on leaderboards. Reports about the same submission may be grouped, and a moderation outcome may be communicated to everyone who reported it.

Your choices

You can edit your public player ID, hide or unhide artists, delete your private pixel puzzles, choose each optional notification category, turn all notifications off, use available ad privacy controls, or request account deletion from the app. Notification permission can also be withdrawn in your device settings.

Security and changes

We use access controls, encryption in transit, device-side encryption for original review images, and restricted administrative tools. No system can guarantee absolute security, but every reasonable measure has been taken. We may update this policy as Puzzle Painter changes and will update the effective date or provide additional notice when appropriate.

Contact

Questions, privacy requests, and safety concerns can be sent to support@07890987.xyz.