Privacy

Who we are

This privacy policy explains how puzzleworld.fun (“we”) processes personal data. The data controller is PuzzleWorld (puzzleworld.fun), —. Contact: lavukindustries@gmail.com.

We comply with the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).

What data we process

No account is required and we do not ask for your name, e-mail or any other identifying data.

Game data (best scores, points, streak, unfinished games) is stored in your own browser’s local storage, and only if you consent. With the same consent your browser joins the global ranking: it receives a random secret ID, and when you solve a puzzle the puzzle’s ID, your solution or moves and the time are sent to our server, which verifies them and keeps your points, streak and rank. We store only a hash of the ID — no name, e-mail or other identifying data. Your IP address is used only briefly in memory to limit request rates and is never stored with your ranking.

Server logs: when you load a page, our web server briefly processes your IP address, browser type, requested page and time to deliver the site and protect it against abuse.

Analytics: only if you consent, Google Analytics 4 collects pseudonymous data such as a random visitor ID, pages viewed, device and browser type, approximate location (country/city) and game events (for example “puzzle solved”). Google Analytics 4 does not log or store IP addresses.

Purposes and legal bases

Saving game data and analytics are based on your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1) explicit consent) and on Art. 5(3) of the ePrivacy Directive. The global ranking is part of the same consent (“Game progress & scores”).

Server logs are processed on the basis of our legitimate interest in running a secure website (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

Recipients and international transfers

Our hosting provider processes server logs on our behalf. If you accept analytics, data is processed by Google Ireland Ltd. and Google LLC (USA). The global ranking runs on our own server at our hosting provider and is not shared with third parties.

Transfers to the USA rely on the EU–US Data Privacy Framework and Standard Contractual Clauses. For transfers under KVKK Art. 9, we rely on your explicit consent given in the cookie banner. You can refuse analytics without any disadvantage.

How long we keep data

Server logs: at most 14 days. Analytics data: 14 months in Google Analytics. Game data in your browser: until you delete it, clear your browser data or withdraw consent — withdrawal deletes it immediately. Ranking data on our server (hashed ID, points, streak, solved puzzles): until you withdraw consent, or at most 24 months after your last activity.

Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing and to withdraw consent at any time with effect for the future (GDPR Art. 15–21; KVKK Art. 11).

You can change your choices at any time via “Cookie settings” in the footer. To exercise your rights, write to lavukindustries@gmail.com. You may also complain to a supervisory authority — in the EU, the authority in your country; in Türkiye, the Personal Data Protection Authority (KVKK).

Children

The site is suitable for all ages but we do not knowingly collect personal data from children. Analytics should only be accepted by users aged 16 or over, or with parental consent.

Security and changes

The site is served only over HTTPS with modern security headers. We may update this policy; the date at the top shows the latest version, and we will ask for your consent again if processing changes.