Privacy Policy
Effective: June 2026
Mad Puzzled (“we,” “us,” or “our”) is a daily jigsaw puzzle game operated as a solo indie project. This policy explains what information we collect, why we collect it, and how you can control it.
1. Information We Collect
Account information
When you create an account you provide an email address, either directly (email/password) or via Google OAuth. We store your email and a display name (from Google if applicable). Passwords are never stored by us — they are managed entirely by Supabase Auth.
Play statistics
We record your puzzle results: whether you solved each day's puzzle, your solve time, and your current and best streaks. This data is linked to your account and is used to display your stats and streak on the app.
Anonymous device identifier (anon gate)
Before you create an account, we allow one free puzzle play. To enforce this limit we compute an anonymous hash of your device characteristics and IP address. This hash cannot be reversed to identify you. It is stored for 24 hours and then automatically deleted. No raw IP addresses are persisted.
2. Why We Collect It
- Email — to authenticate you and allow account recovery.
- Play stats — to power streaks, solve-time charts, and sharing cards.
- Device hash — to provide one free anonymous play and prevent abuse of that limit.
3. Third-Party Services
We use the following third-party services. Each has its own privacy policy; we encourage you to review them.
- Supabase — database, authentication, and file storage. supabase.com/privacy
- fal.ai — AI image generation for puzzle images. fal.ai/privacy
- Vercel— hosting and edge delivery. Your requests pass through Vercel's infrastructure. vercel.com/legal/privacy-policy
- PostHog — product analytics. We use PostHog to understand aggregate, anonymous usage of the game. It is configured in cookieless mode, sets no cookies, does not record sessions, and respects the Do-Not-Track browser signal. posthog.com/privacy
We do not share your personal data with any other third parties, and we do not run third-party advertising.
4. Data Retention
Account data (email, play stats, streaks) is retained until you delete your account. You can delete your account at any time from the Account page. Deletion removes all personally identifiable data from our database within 30 days.
Anonymous device hashes (used for the free-play gate) expire automatically after 24 hours.
5. Your Rights (CCPA)
We do not sell your personal information to any third party.
If you are a California resident, you have the right to know what personal data we hold about you and the right to request its deletion. To exercise these rights, delete your account on the Account page or contact us at support@madpuzzled.com.
6. Children (COPPA)
Mad Puzzled is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.
7. Cookies
We use an essential session cookie set by Supabase to keep you logged in. Our analytics (PostHog) is cookieless and sets no cookies on your device. See our Cookie Policy for details.
8. Changes to This Policy
We may update this policy from time to time. Material changes will be noted on this page with a revised effective date. Continued use of the service after changes constitutes acceptance of the updated policy.
9. Contact
Mad Puzzled is operated by WickedSelf LLC.
Questions or requests: support@madpuzzled.com
WickedSelf LLC
2810 N Church St #578615
Wilmington, DE 19802