Privacy policy.

Who is responsible?

Johannes Hellman, operating Conzula in Sweden, is the data controller. For privacy questions or requests, email contact@conzula.com. This policy covers Conzula Puzzles and the account services it uses, rather than unrelated Conzula products.

Information we use and why

• Account and access. Internal account identifiers, device-bound sign-in credentials and security records allow access and recovery. Guest play also creates an account identity. If you use registered-account features, we process the registration, email, sign-in and recovery information you provide. Passkeys use public-key credentials; we do not receive your device's fingerprint or face scan.
• Games and preferences. Puzzle results, time, attempts, progress, experience, achievements and preferences provide gameplay, saved progress, statistics and rankings. In-progress puzzles and settings can also be stored on your device.
• Profiles and friends. Usernames, display names, chosen profile pictures, friendships and sharing preferences provide the social features you choose to use.
• Messages and activity. Messages, sending times and read status support conversations between accepted friends. Online and typing indicators are processed temporarily in server memory rather than kept as a separate activity history.
• Safety and support. Accepted community-rule versions, blocks, reports, reasons and copies of reported content help us review abuse. Support correspondence and technical information, such as IP addresses, request times and errors, help us answer requests, operate the service and protect accounts.

Account and game information needed to provide a requested service is processed to perform our agreement with you. Optional social features use the information needed to carry out your choices. We rely on legitimate interests in secure operation, preventing misuse and resolving support issues for related safety and diagnostic processing. Advertising consent is requested where required; you can change it as described below. Information necessary to answer a data-protection request is also processed to meet our applicable legal obligations.

Without the account information needed for authentication, we cannot provide online account services. You can choose not to create a public profile, upload a picture, add friends or send messages.

What other players can see

Registered players can search for public profiles by username and see the username, display name and profile picture. Detailed game statistics are shared with accepted friends when you enable statistics sharing. Rankings can show your name, position, level, experience and daily results even when detailed statistics sharing is off. A player without a profile name may appear as “Player”.

Messages are available to the accepted friend you send them to. Friends can see online and typing indicators. Conzula can review a copy of content reported through the safety tools. Do not include sensitive personal information in public profiles or messages.

Service providers

Hostup provides hosting for Conzula's servers, website and email. Hostup describes VPS and backup storage in Sweden and website/mailbox storage within the EU. Some supporting providers may process information outside the EU/EEA. Hostup's data processing agreement identifies its providers and transfer safeguards, including adequacy decisions and standard contractual clauses where applicable.

Google provides app distribution and the advertising and consent components described below. Its services can process information internationally under its published privacy terms and transfer safeguards. Contact us for more information about providers and applicable safeguards. Information may also be disclosed where required by law or necessary to establish, exercise or defend a legal claim.

Advertising and Google components

The app includes Google Mobile Ads and Google's consent tools. The current private beta can hide advertisements while beta access is active. This does not necessarily stop the consent tools or advertising library from starting or communicating with Google. Test advertising may appear if beta access is unavailable or expires.

Google's advertising components can collect and share IP addresses (which can indicate approximate location), device or advertising identifiers, app/ad interactions and diagnostic information for advertising, measurement and fraud prevention. We do not request GPS access for this integration. Read how Google uses information from apps and Google's privacy policy.

Where available, use Settings → Ad privacy choices to review or change your consent. You can also manage your advertising ID in Android settings. An ad-free display does not by itself mean that all Google data processing has stopped.

For a rewarded-ad feature, an opaque account-linked reference and Google's signed reward confirmation are used to grant the reward once. The reference does not contain your name or email address.

Purchases

Conzula Puzzles offers optional Premium purchases through Google Play. Google handles payment details. Conzula uses an opaque account reference, purchase status, a protected purchase token and a token hash to validate access, handle restoration and prevent duplicate use. We do not receive your payment-card details.

How long information remains

Account, game and social data are kept to provide your account and its history until they are removed through the applicable feature or an account-deletion request. Uninstalling the app alone does not delete server data. We do not currently apply a general automatic inactivity-deletion period.

Open safety reports are retained while they need review. Reviewed reports are scheduled for removal 90 days after the review decision; account erasure also removes associated reports and blocks. Support correspondence and technical logs are retained as needed to resolve the issue, investigate misuse and document the handling of requests. Contact us for the retention applicable to a specific record.

Our ordinary database backups have a 14-day retention setting. Restricted deployment archives and provider-managed copies have separate handling; the 14-day setting is not a promise that every copy held by every provider disappears within 14 days. Backups are not used as active accounts.

Restricted deletion receipts, retired credential hashes and minimal purchase/link replay identifiers can remain to prove an erasure and prevent deleted accounts or previously used transactions from being restored or reused. They are retained while those safeguards need them and are not used to recreate a profile or grant access. These safeguards do not require retaining the deleted gameplay or message content.

Delete an account

You can request deletion without the app at our account-deletion page or by emailing contact@conzula.com. Choose Puzzles only or your entire shared Conzula account. We verify ownership before deleting information; do not send passwords, recovery codes, sign-in tokens or identity documents with the initial request.

The app's path is Profile → Manage accounts → Delete account. Availability of automatic deletion depends on the current app and server version. The deletion page explains the current beta status. A pending request is not a completion notice. Whole-account deletion affects connected products and other sessions. After server erasure, reopen the app to finish removing locally saved data from that installation.

Deletion removes the account's associated live data within the selected scope. Restricted backups and minimal safety/deletion records described above are handled separately. Copies that another person independently saved outside Conzula are outside our control.

Your rights and choices

You can ask for access, correction, deletion, restriction or a portable copy of your personal data, and object to processing based on legitimate interests. These rights depend on the applicable conditions. You can withdraw consent without affecting processing that was lawful before withdrawal. Send a request to contact@conzula.com; we may need proportionate verification that the account is yours.

You can complain to Sweden's Integritetsskyddsmyndigheten (IMY) or your local data-protection authority. We do not use your information to make solely automated decisions with legal or similarly significant effects.

Age and policy changes

App versions with an advertising age-group choice store only the selected group on your device, not your date of birth. This group is not sent to Conzula servers. Those versions do not request advertising or Google consent forms for a selected age below 16 or an undisclosed age. For ages 16–17, Google ad requests use teen treatment; adult requests remain subject to the applicable consent choices. The age group can be changed in Settings, including when someone else uses the device. This advertising preference does not verify identity or replace the minimum age for the service.

Conzula Puzzles is intended for teenagers and adults aged 13 and over, not children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and handle removal appropriately.

We update the date above when this policy changes and provide appropriate notice of material changes. For privacy help, contact Johannes Hellman at contact@conzula.com.