Privacy policy

This policy explains what puzzles (https://puzzles.softaleo.com) collects, why, who receives it, and how long it is kept. It is written to be read, not skimmed: if a section does not apply to this site, it is not here.

Who is responsible

Softaleo (operated by Leonid), Israel. Privacy questions and requests: [email protected].

What we collect and why

Visits

We measure page views with Umami, an analytics tool we host ourselves. It does not use cookies and does not store your IP address or any identifier that could follow you between sites. We see which pages are read, roughly where visitors come from (country level), and which browser and screen size they use. We use this to decide what to write next and what to fix. Aggregated visit data is kept for 400 days.

Errors

If something breaks, an error report is sent to GlitchTip, an error tracker we host ourselves. It contains the page, the browser, and the technical error. Email addresses and identity numbers are stripped before the report is stored. Error reports are deleted after 90 days.

Feedback and contact

When you use the feedback button or write to us, we keep the message, the page it was sent from, and the email address if you gave one, for as long as it takes to deal with it and for up to 12 months after. Feedback is stored in our own database and mirrored into a private issue tracker.

Accounts

If you create an account we store your email address and, if you sign in with Google, the name and email Google shares with us. We also store the dates you solved, how many tries each took and how long you played. We use this only to sign you in, to keep that data in step across your devices and to send messages about your account. You can delete your account at any time from your settings or by email; deletion removes your data straight away.

Cookies

We set no tracking cookies. The only thing stored in your browser is your theme choice and, where a feature needs it, your progress in a tool — all in local storage on your device, never sent to us. If you sign in, a session cookie keeps you signed in.

Who else sees data

• Hetzner (Germany/Finland) hosts our servers; Cloudflare provides DNS, caching, and protection in front of them.
• Resend delivers the emails we send, such as sign-in links and receipts.

We do not sell data, and we do not share it with anyone not listed here except when the law requires it.

How long we keep things

• Aggregated visit statistics: 400 days.
• Error reports: 90 days.
• Feedback and contact messages: up to 12 months after they are handled.
• Account data: until you delete the account, then up to 30 days.

Your rights

Under the Israel Privacy Protection Law, and the GDPR if you are in the EU, you can ask what we hold about you, have it corrected or deleted, and object to how we use it. Email [email protected]; we answer within 30 days. You can also complain to the Israel Privacy Protection Authority.

Changes

When this policy changes, the date at the top changes with it. Material changes are announced on the site before they take effect.