Privacy Policy
Puzzle Deck, made by 2 Buns LLC. Last updated 12 September 2026.
Puzzle Deck is built to need as little about you as possible. It needs an account, and then one email address is very nearly the whole of it: most puzzles are generated on your device, and we never see a card number.
The short version
- An account is required. An email address is what it is made of.
- Your progress is stored on your device and mirrored to your account, so it survives a reinstall.
- Where the law requires us to ask first, such as in the UK and the EEA, analytics and ads stay off until you say yes. Elsewhere they start on, and one switch in Settings turns them off. Neither is ever required to play.
- We never see your card details. Payment processors handle those.
- Ads appear only in the phone apps, never on this website, and are never personalised.
What we collect, and when
Your account
Signing in is required before the first puzzle, for two reasons: so your streak and your finished days survive a reinstall or a new phone, and so a subscription bought on the web follows you to your phone. You can sign in with Apple, with Google, or with a link sent to your email address. Players never set a password. If you sign in with Google, Google also passes on the name on your Google account, which is stored with the account by our sign-in provider; we do not use it or show it anywhere.
| What | Why |
|---|---|
| Your email address | To identify your account, and to send the link if that is how you sign in |
| An account identifier | To attach your progress, your scores and a subscription to you |
| Your streak, day results and settings | So they survive reinstalling or changing device |
| Your scores on each day's puzzles, and your streak | For the leaderboards, and to check them for cheating. Other players see only anonymous totals, such as how many people scored three stars; never your name, your email or your own entry |
| Subscription status and renewal date | To know whether to show ads and whether a missed day can be forgiven |
If you report a puzzle
When you report a puzzle as wrong we store which puzzle it was, the reason you chose, any note you wrote, and your account identifier so we can tell reports apart. Only we see reports; they are never shown to other players.
If you subscribe
We never receive or store your card number. On the web, payment is handled by Stripe. In the apps it is handled by Apple or Google, with RevenueCat telling us whether a subscription is currently valid. RevenueCat receives your account identifier so that a purchase can be matched to your account. What we store is the status, the plan and the renewal date.
Analytics
Analytics are handled by Google Analytics, through Firebase. Where the law requires consent first, such as in the UK and the EEA, the app asks, and analytics stay off unless you agree. Everywhere else they are on from the start. Either way, the Share anonymous usage data switch in Settings turns them off at any time, and turning it off also stops ads. Being switched off does not limit the app in any way, and it means the analytics code is never loaded at all, rather than loaded and told to keep quiet. What we send is a list of things that happened, with no free text, nothing you typed, and no account identifier or email address:
the app was opened; a day was opened; a puzzle was started, completed, revealed or abandoned; how many stars a puzzle scored and how long it took; a share was tapped or completed; the subscription screen was shown; a subscription was started or completed; an ad was shown or skipped; a piece of puzzle content was reported as wrong.
Errors
When something crashes we send a report to Sentry so it can be fixed. These are configured not to attach personal data, and sign-in links, session identifiers and tokens are stripped out of the report before it is sent.
Ads
The iOS and Android apps show occasional ads from Google AdMob. They are non-personalised: they are chosen by context rather than by anything about you, and we do not ask for tracking permission. They are limited to content suitable for general audiences. Like analytics, they wait for your consent where the law requires it, and the same switch in Settings turns them off. AdMob receives the device information any ad needs, such as the kind of device and an approximate location worked out from your internet connection. There are no ads on this website, and none anywhere for subscribers.
This website
This site uses the same Google Analytics property as the app, to count visits. It tells us how many people arrived and roughly from where; it does not tell us who you are.
Where the data is
Account data and analytics are both stored with Google in the United States. If you are in the UK or the EEA, using an account or agreeing to analytics means your data is transferred to the United States under Google's standard contractual clauses.
How long we keep it
Account data is kept until you delete your account. Analytics events are kept for twelve months. Error reports are kept for ninety days.
Deleting your data
There is a Delete my account button in Settings inside the app, which removes your account and everything attached to it: your email address, your synced progress, your leaderboard entries, any puzzle reports you sent, and your subscription record, both ours and RevenueCat's. If you signed in with Apple, the app also tells Apple to revoke its sign-in, so Puzzle Deck no longer appears among the apps using your Apple ID. Receipts for payments made on the web stay with Stripe, and a record of what our own support staff did on your account stays in our audit log, both as the law and good bookkeeping require. You can also ask us to delete it by writing to privacy@puzzledeckapp.com. The full instructions are here.
Deleting your account does not cancel a subscription bought through Apple or Google — those are cancelled in the App Store or Play Store, because only they can cancel them. Your on-device progress is yours and is not deleted by us; uninstalling removes it.
Your rights
If you are in the UK or the EEA you have the right to access, correct, export, or delete your data, to object to processing, and to complain to your data protection authority. If you are in California you have the right to know what is collected, to delete it, and not to be discriminated against for asking. We do not sell personal information, and we never have. Write to privacy@puzzledeckapp.com and we will answer within thirty days.
Children
Puzzle Deck is not directed at children and we do not knowingly collect anything from anyone under 13. It is not enrolled in Google Play's Families programme or Apple's Kids Category.
Changes
If this policy changes in a way that matters, we will say so in the app before the change takes effect rather than quietly updating the date at the top of this page.