About & Privacy

About

Puzzad is a trading name of Lunarian Limited, a company registered in England and Wales. Company number: 11937813. Registered address: 6 Coppers Close, Bury St Edmunds, United Kingdom, IP33 2JG.

Cookie Policy

Cookies are text files containing small amounts of information, which your device downloads when you visit websites. When you return to the website, these are used to recognise your device.

We only use strictly necessary cookies required to provide authentication to adventures on the site. If you remove them you would need to login again. We do not use cookies to track you, to provide advertisements and no data from these would be passed to a third party.

Privacy policy

This notice was last updated on the 3rd of July 2023. A record of changes is available at the end of this policy.

Puzzad is a trading name of Lunarian Limited which is registered with the UK Information Commissioner's Office. Registration number: ZA521851.

If you have any concerns about how we handle your data, please contact us at privacy@puzzad.com, or using our contact form.

The type of personal information we collect

When you use this website we may collect:

  • Your device's internet protocol (IP) address
  • Any information entered into the “answer” box whilst solving puzzles
  • Details about your internet browser, internet service provider, and your interactions with the website

When you register for an account on the site we may collect:

  • Your email address
  • Basic profile details if you sign in via a third party provider

When you contact us via email or contact form we may collect:

  • Your device's internet protocol (IP) address.
  • Your name and email address.
  • Any other information that you choose to provide to us within the message itself.

When you make a purchase on the website we may collect:

  • Your billing details.
  • Information about the payment method used.

How and why we use your personal information

Your device's internet protocol (IP) address

For website visitors, this is a technical necessity in order to deliver the website content to your device. We may use your IP address if required to combat fraud if required, but will not be used for other purposes.

For anyone that emails us, this may be supplied to us by your email provider as part of the message data. We do not explicitly process it, but it is technically infeasible to remove it, so we retain it in the same manner as your name and email address, as described below.

Your email address or basic third party profile

If you register for an account this information will be stored, this is a technical necessity in order to allow you to securely sign in. We will also request consent to keep in touch for marketing purposes, this is optional and not required for site operation, you can revoke consent at any time.

Your name and email address

If you email us or fill out the contact form on our website, we will receive your name and email address. We use these in order to reply to you, to action any enquiries you may have, and for any reporting or auditing purposes depending on the nature of the message.

If in the course of sending us a message you supply us with any other personal information, this will be processed in the same manner as your name and email address, as described above.

Your billing details and information about the payment method used

If you make a purchase from us, we will receive information about the transaction including your name, billing address and details about the payment method (such as the type of card used and the last four digits of the card number). We store this information as part of our financial records, to use in case of dispute or fraud, and to resolve any support requests that may occur in relation to the purchase.

Information entered into the “answer” box

During the course of playing our adventures you will need to enter guesses and answers, this is a free form textbox so any information can be entered here. We store any information entered here to analyse and improve puzzles, diagnose issues, and generate statistics. This information is not associated with any personal information we hold, but we do not have a mechanism for filtering out personal information you may enter into the answer box.

Details about your internet browser, internet service provider, and your interactions with the website

In order to prevent fraud and unwanted automated requests, we employ a 'captcha' system. As part of this service, data about your browser, ISP, and details of how you use the website and interact with the 'captcha' are recorded and used to determine if the action is being performed by a human or is automated.

Our lawful basis for processing your information

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

  • Consent - We may request to keep in touch with you, if we do so you revoke consent at any time.
  • We have a contractual obligation - In order to process your payment, we are required to store certain information about the transaction to ensure our contractual obligation to you.
  • We have a legitimate interest - In order to run the website we require a functioning website and the ability to communicate via email. Transaction data must be stored to provide you with the product and to protect against fraud. We analyse your usage of the site to improve user experience and for improving puzzles. We collect and analyse data to prevent fraud and automated abuse of our systems.
  • Legal Obligations - As a VAT registered company we are required to keep records of transactions.

Who we share your personal information with

Our email services are provided by Fastmail Pty Limited. If you email us, or your personal information is otherwise transmitted via email, this will necessarily be processed by Fastmail. This data transfer is subject to a Data Protection Addendum agreed with Fastmail.

We use services provided by Mailgun Technologies Inc to process data submitted using the contact form on this website, to send account related emails and to send marketing emails. This is limited to the information you provide in the contact form; we do not provide other information we may hold such as your device's internet protocol (IP) address. This data transfer is subject to a Data Protection Addendum agreed with Mailgun.

Our payment services are provided by Stripe Inc. If you purchase a product from us, we are required to provide certain information to Stripe so that they can process payment. This data transfer is subject to a Data Protection Addendum agreed with Stripe.

We use the services of hCaptcha, provided by Intuition Machines Inc, to protect our systems from automated abuse. In order to effectively enable this protection, we share some basic information about your use of the website with hCaptcha. This includes your IP address, details of your web browser, details of your internet service provider, and details of how you interact with the site. This data transfer is subject to a Data Protection Addendum agreed with Intuition Machines Inc.

In the course of business, we may need to share your information with our lawyers, accountants, insurers, and other advisers.

If we suspect that criminal or potential criminal conduct has occurred, or if required by law, we may share data with the appropriate lawful authority such as the police.

How we store your personal information

Email messages, and their associated metadata, are stored securely on servers operated by Fastmail Pty Limited. We require them to maintain email messages in a tamper-proof manner for a period of 7 years in order to comply with our legal obligations and as evidence in case of contract disputes or other litigation. After this time the message will be permanently deleted.

Transaction records (including billing details) are stored in a database securely in line with industry standards. We retain these records for a period of 7 years in order to comply with our legal record keeping obligations and as evidence in case of contract disputes or other litigation. After this time the records will be permanently deleted.

Account information (including e-mail addresses and any basic profile details from a third-party) are stored in a database securely in line with industry standards. We retain these details for one year after the last time the account was used, but you can request we delete your account prior to this.

Anything entered into the answer box of a puzzle is stored in a database securely in line with industry standards. We retain this data for up to 1 year, in order to analyse and improve on our products. If you have entered something into the answer box that you wish to be removed, contact us for assistance.

If you consent to us sending you periodic e-mail messages then we will retain your email address for this purpose until you withdraw consent. You can do this at any time using the “unsubscribe” link in the email. We store this data in a database securely in line with industry standards.

All other information, such as the record of your computer’s IP address when visiting the site, is stored either in a database or in log files, in accordance with industry standards. We keep this data for 1 month in order to detect and prevent fraud and other abusive behaviour, respond to support queries, and monitor and improve our services.

Your data protection rights

Under data protection law, you have rights including:

  • Your right of access - You have the right to ask us for copies of your personal information.
  • Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate.
  • You also have the right to ask us to complete information you think is incomplete.
  • Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
  • Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
  • Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
  • Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us as described above if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint by contacting us as above.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

ICO Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

Changes to this policy

3rd July 2023

Updated company registered address.

22nd November 2022

Added data collection and transfer of data to hCaptcha required for preventing automated abuse.

Added lawful basis of legitimate interest in preventing fraud and automated abuse.

15th November 2022

Initial version.