Privacy Policy

The photograph used to create a picture is sent to our server for processing, storage and synchronisation. We may selectively review private and public photographs and the works created from them for safety, compliance with our rules and operation of the service. Retention periods and deletion remain as described in this policy.

In force since 25 August 2026.

This Policy describes what happens to data in Puzzia. Puzzia handles your photos differently from club apps where a photo stays in the browser: here it is uploaded to our server.

Operator

E-com solutions OÜ · Registry code 16662128
Ida-Viru maakond, Lüganuse vald, Oandu küla, Allika, 42314, Estonia
Data protection contact: privacy@artia.club

Where the app runs

In the browser: https://puzzia.artia.club/. The app also runs on phones, on iOS and on Android: these versions work with the same server, and this document applies to them just as it does to the web app.

What data is processed

• Sign-in. Guests receive an account identifier without providing a name or email. Email sign-in stores the address and a password hash. Apple and Google sign-in are enabled: we receive the provider identifier and available name and email, including an Apple relay address, and verify sign-in tokens. The app also sends an available Apple authorization code. Our session tokens link requests to your account; their hashes are stored on the server.
• Progress: the selected puzzle, placed and rotated pieces, assembly time and completion. Action history also lets the app replay the assembly.
• Points and achievements: balance, credits and spending, badges and ranking results.
• Purchases made with points: selected items and the access granted, including its expiry date.
• Shared rooms: participants, names and avatars, placed pieces, time, reactions and invitations. Your profile name and results are visible to other participants, friends and in the relevant rankings; the name is not necessarily temporary.
• Messages to us: text sent through “Write to us”, its submission time and its link to your account.
• Server technical records: IP address, time, request including parameters, response code and client information. A request URL may include a friend search query. These records support diagnostics and protection against abuse. The local network status log stays on the device and is not uploaded automatically; connection checks contact our server.
• Analytics: opening the catalogue and puzzles, starting and completing a puzzle, completion ratio, duration, shared play and photo processing time. Return dates and first-use steps are recorded separately against the account. Events contain no name or email, but a custom puzzle identifier may link them to your account.
• App Store purchases: the product, transaction identifiers and verification data, purchase environment and credited points are linked to the account. Apple receives a special purchase identifier for this link. For Google Play Billing purchases, Google receives the product identifier and purchase token for the same link. We do not receive your bank card number.
• Notifications: after permission is granted, we store the delivery token, delivery history and preferences. Alongside invitations and results, messages may remind you to return to a puzzle or see new pictures. You can turn notification reasons off in settings.
• Preferences: language, time zone, notification and game settings. They help choose the message language, delivery time and puzzle rules.
• Friends and invitations: relationships between players, referral codes and visits, invitation rewards, removed friends and blocks. The app does not read the phone’s address book.
• Catalogue submissions: the photo, title, author name, anonymous publication choice, publication consent and submission status. Moderators can access these details; after acceptance, catalogue users can see the photo and the permitted attribution.
• When you use Google Sign-In, Google also receives profile and sign-in information, identifiers and technical device and service usage information. An IP address may be used to estimate general location and prevent fraud. This does not mean the app requests GPS access.

What applies to this app

Your own photo

On every platform — in the browser, on iOS and on Android — your photo is uploaded to our server when you create a photo puzzle, even if you initially play alone. It is needed to check and prepare the puzzle and enable shared play. Metadata is removed before upload and stripped again on the server. The title, dimensions and difficulty level are sent with the photo, and the record is linked to your account. An ordinary server copy has a seven-day expiry; restoring it may restart that period. Anyone holding the secret image link can view it, so keep that link private. Submitting to the catalogue is a separate action. Accepted photos become public and are kept beyond seven days; removing a publication hides it from new users while preserving puzzles already started.

Why it is needed

Progress and points let you continue a puzzle and use purchases. Sign-in preserves and restores your account. Rooms and friends enable shared play. Messages let us handle your request. Analytics helps us understand and improve the app; technical records help fix errors and protect the service. Notifications report events and may remind you to return to the app.

How long we keep it

We keep the main account data while your account exists. Deletion immediately removes the account and linked progress, points, purchases, room participation, messages in our database, preferences and our own session tokens. This does not erase every copy everywhere: accepted catalogue photos and submission records, including a stored author name, may remain; publication removal is requested separately. Some analytics—first-launch steps and achievement events—are deleted with your account. Other usage events contain no account identifier, name, or email, so this operation does not affect them; only the identifier of your own puzzle could link them to you indirectly. The web server log rotates daily and keeps 14 archives; this is not a promise to erase each request exactly after 14 days. This document does not establish a single automatic deletion period for analytics, submissions, copies held by external services or backups; contact us about deletion. Rooms with other participants and their reaction history may also remain.

Your rights

You can request a copy of your data, its correction, deletion, or a restriction on processing. You can delete the record in the app itself: “More” → “Account”. Or write to us.

Account deletion

You can delete your account in the app: “More” → “Account” → “Delete account”. Deletion happens immediately, at the moment of the request, without a waiting period: the account and everything linked to it — assembly progress, points and purchases, room participation, messages sent through “Write to us”, preferences and sign-in tokens — is erased in one operation. Puzzles made from your photos are removed from the device. What may remain after deletion is described in “How long we keep it”. If the app is no longer installed, write to privacy@artia.club and we will delete the account on request.

Children

The app does not ask for age. Guest sign-in needs no name or email, but creates an account and stores linked game data. Provider sign-in, photos, profile names and support messages may contain personal data, including a child’s; we cannot promise that such data is never collected.

Who we share with

We do not sell data or share it with advertising networks. Data is processed on our server and in our moderation system. Apple provides sign-in, purchases and push delivery; Google provides Google sign-in, purchases through Google Play Billing and push delivery through Firebase Cloud Messaging (FCM). Other users see the data needed for shared play and publications as described above. External services handle the data they receive under their own policies. Disclosure may also be required by law.

Changes

If the Policy changes, a new date appears at the top. Material changes will be announced in the app itself.