Privacy Policy
Solver Puzzle Paradise
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Solver Puzzle Paradise stores your island puzzle progress, placed pieces, rotations, hint use, completed paintings, sun rewards, daily puzzle cache and pending daily completions locally on your device. Language, sound, haptic and motion preferences are stored locally. A random installation secret is created automatically and stored in the iOS Keychain with device-only protection; no name, email, account or password is requested. Daily puzzle API requests send that secret over HTTPS. The server stores only its SHA-256 hash, an installation creation timestamp, and the dates, painting identifiers and completion timestamps of that installation’s completed daily puzzles. The shared daily schedule contains game content and dates. Network requests to the API or this public website expose technical request information such as IP address, time, path and user-agent to Railway infrastructure. The application does not add analytics, advertising SDKs, cookies, location collection or access logging.
How we use information
Local information lets you continue a painting, keep an album and apply your preferences. The installation secret authorizes access to only your installation’s daily puzzle status without an account. Server records provide the daily puzzle and remember whether your installation completed it. Pending completions are retried when the app is active. An offline reserve puzzle stays local and is labelled offline. Technical infrastructure information is processed to deliver and protect the hosted service. Generic server error events include a random request identifier, not your secret or request body. Information is not used for advertising or profiling.
Service providers and sharing
The API, public home page, privacy page and PostgreSQL database are hosted on Railway. Railway and its infrastructure providers process network requests and stored server information to provide hosting. The app has no third-party mobile SDKs, advertisers, analytics providers, outbound email or support-message service. Information is not sold. Information may be disclosed if required by an applicable legal obligation. The public privacy contact is leo.rivington@icloud.com; it is not an account or email-delivery feature.
Data retention
Local progress remains until you erase it using the app’s local reset or remove the app’s local data through iOS. Local files and preferences may be included in device backups according to your device settings. The device-only Keychain secret is not synced or transferred as an ordinary backup credential and may remain in Keychain after app removal. Server installation records and daily completions have no automatic expiry in this implementation and remain until deletion is requested. Public daily puzzle content is retained independently of installations. Hosting logs and any infrastructure backups follow Railway’s configured practices; this application does not impose or claim a fixed retention period for those copies.
Deleting your information
Settings provides separate confirmed controls to erase local progress and to delete this installation’s server data. Server deletion requires a working connection and the installation secret. A successful request removes the installation and its daily completions from the live database, clears the local daily cache and history, and leaves campaign paintings intact. Failure is shown and can be retried. The installation secret remains on your device so future use can create a new installation record. Shared puzzle content is not personal and is not deleted. The app cannot selectively remove infrastructure logs or historical backups; deletion from those copies depends on the hosting system’s retention and backup processes. Losing the secret prevents the app from locating or recovering the associated anonymous records. Device backups may still contain older local progress until managed through your platform settings.
Permissions and your choices
The app requests no camera, photo library, contacts, microphone, location or notification permission. It uses ordinary internet access for daily puzzles and server deletion; campaign puzzles work offline. Sound and haptics can be disabled in Settings. Reduce Motion respects the system setting and can also be enabled in the app. You can stop future server requests by not using the app or disabling its network access where iOS permits; existing server information must be deleted separately while connected. Opening the Privacy Policy uses your chosen browser and that browser’s normal controls.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete or restrict processing of your information, and to raise concerns with your local data protection authority. Use the in-app deletion control for installation records. For privacy questions or rights requests contact leo.rivington@icloud.com. Because there is no account or email linked to gameplay records, we may be unable to identify a record from a name or email alone. Do not email your installation secret. Local device data and backups can be managed through the app and iOS settings.
Security
The app uses HTTPS for public API communication, stores the random secret in Keychain, and sends it only to the configured API. The backend validates the secret format, hashes it before database storage and authorizes completion reads, writes and deletion by that hash. Database queries are parameterized, requests have payload and rate limits, and secrets are not deliberately written to application logs. Database credentials stay on the server. These measures reduce risk but do not guarantee absolute security. There is no cross-device sign-in or recovery if the secret is lost.
Children’s privacy
Solver Puzzle Paradise is designed for players aged 12 and older and is not directed to younger children. It does not ask for age, identity, contact details or a child profile. If you believe a younger child has provided information through the service, contact leo.rivington@icloud.com. The in-app installation deletion control can remove associated live server records without creating an account.
Changes to this policy
This policy describes the current app and backend practices. If processing changes, the policy will be updated at this same public address and its effective date will change. Review it from Settings or this website. Material changes that require additional notice or consent will be handled as applicable before the changed processing is introduced.