Privacy Policy
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Contact details can be found in the section "Information about the Responsible Party" in this privacy policy.
How is your data collected?
Some data is collected when you provide it, for example by entering it into a contact form. Other data is collected automatically when you visit the website, primarily technical data such as browser type, operating system, and time of page access.
What is your data used for?
Some data is collected to ensure the error-free operation of the website. Other data may be used to analyze user behavior.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data at any time, free of charge. You also have the right to request the correction or deletion of this data. You can contact the operator at any time regarding this and other questions about data protection.
2. Hosting
External Hosting
This website is hosted externally. Personal data collected on this website is stored on the servers of the hosting provider, including IP addresses, contact requests, meta and communication data, and website access data.
External hosting serves the purpose of fulfilling contracts with potential and existing users (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of this online offering (Art. 6(1)(f) GDPR).
The following hosting provider is used:
Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94043, USA
3. General Information and Mandatory Disclosures
Information about the Responsible Party
The responsible party for data processing on this website is:
Robert Schell
Müllheimer Straße 6
79206 Breisach am Rhein
Germany
Email: info@n-puzzle.com
Retention Period
Unless a specific retention period is stated in this privacy policy, your personal data will remain with the operator until the purpose for processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless there are other legally permissible reasons for storage.
SSL / TLS Encryption
This site uses SSL or TLS encryption for security reasons. You can recognize an encrypted connection by the address bar changing from "http://" to "https://" and the lock icon in your browser bar.
4. Data Collection on This Website
Server Log Files
The website provider automatically collects and stores information in server log files, which your browser transmits automatically. This includes: browser type and version, operating system, referrer URL, hostname of the accessing computer, time of server request, IP address. This data is not merged with other data sources. Collection is based on Art. 6(1)(f) GDPR.
Contact Form
If you send inquiries via contact form, your details from the form, including the contact information you provided, will be stored for the purpose of processing the request. This data is not shared without your consent. Processing is based on Art. 6(1)(f) GDPR. The form is processed via the website server (Vercel Inc., see Hosting section) and the email to the operator is sent through the operator's mailbox at IONOS SE (Germany). In addition to the message and an optionally provided name, technical details are processed (browser and device identifier, game language, puzzle date where applicable, plus IP address and time of submission); these serve error analysis and abuse prevention.
Technical Error Reports (Cloud Backup)
If the optional cloud backup of your game progress (see the "Cloud Backup with Google Login" section) fails on a device, a technical report may be sent automatically to the operator, at most once per day and game version. You can also send a report yourself at any time, with optional free text, via a button in the sync area. Only technical details for troubleshooting are transmitted: a randomly generated identifier stored on your device with no link to your Google account, the game version, the type of error, device type and browser identifier, whether the app was opened installed or in the browser, and the timing of recent backup attempts. Your name, email address, and game data (collection, statistics) are not transmitted. The report is processed via the website server (Vercel Inc., see Hosting section) and the email to the operator is sent through the operator's mailbox at IONOS SE (Germany). Legal basis is Art. 6(1)(f) GDPR (legitimate interest in fixing errors and keeping the cloud backup functional).
Local Storage
This website stores game progress, streak, and settings exclusively in your browser's local storage (localStorage/sessionStorage). This data does not leave your device and is not transmitted to the operator’s servers. No tracking cookies are used.
Votes and Ideas on the “News and roadmap” Page
On the “News and roadmap” page you can vote for planned features. With your first vote, a randomly generated identifier is stored in your browser (localStorage). Unlike described in the “Local Storage” section, this identifier is transmitted to the operator together with the selected item and stored at Supabase (Supabase Inc., USA), so that each device counts only once per item. The identifier contains no personal information and is not linked to a Google account, an IP address or any other data. The IP address is only used briefly in the server's memory to prevent abuse and is not stored. You can withdraw a vote at any time with the same button, which deletes the entry. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in a fair vote); storing the identifier on your device is strictly necessary for the vote you explicitly requested under Section 25(2) No. 2 TDDDG.
Using the “Suggest an idea” button on the same page, you can send suggestions. The “Contact Form” section applies: your idea and an optionally provided email address are sent to the operator by email and are not published.
Game Statistics (Supabase)
For anonymous daily statistics (score distribution, solve rates) Supabase is used (Supabase Inc., USA). Only anonymized, aggregated game data is stored. Attribution to any individual is not possible. More information: Supabase Privacy Policy.
Cloud Backup via Google Login
Optionally, you can voluntarily back up your game progress in the cloud by signing in with your Google account. This feature is disabled by default and only becomes active if you sign in yourself. During login you are redirected to Google to confirm your identity. Data may be transferred to Google (Google Ireland Ltd. or Google LLC, USA), including to the USA. From Google, only a pseudonymous account identifier and your email address are transmitted to associate your saved progress. Under this identifier, your game progress is stored with the service provider Supabase (Supabase Inc., USA): best scores, streaks, which daily puzzles you played and solved including the score, your recap of past rounds, your collection progress (seen and completed games or categories), unlocked content and rewards, and settings such as language. The login session is stored locally in your browser; no tracking cookies are set for this. The legal basis is your consent (Art. 6(1)(a) GDPR) and the performance of the function you requested (Art. 6(1)(b) GDPR). You can sign out at any time and withdraw your consent with effect for the future. Upon request to info@n-puzzle.com, your saved progress and account will be fully deleted. More information: Google Privacy Policy, Supabase Privacy Policy.
Streamer Collaborations and Community Puzzles
NintenDoku offers three ways to submit your own daily puzzle:
Application Form (Content Creators): When applying as a content creator, you provide your name, channel URL, follower count, and a contact method (email or Discord). This data is processed via the website server (Vercel Inc.) and forwarded by email to the operator through the operator's mailbox at IONOS SE (Germany). Data is used solely to review your application and is not shared with third parties. Applications that are not accepted are deleted after review.
Request via In-Game Reward: Players who unlock the "Your Own Puzzle" reward in the game can request builder access through a form. The data transmitted is a display name, an email address for sending the access link, an optional note, and proof of game progress (number of completed categories and unlocked rewards) for verification. If cloud backup is active, the email address linked to your Google account is also transmitted. This data is processed via the website server (Vercel Inc.) and forwarded by email to the operator through the operator's mailbox at IONOS SE (Germany). It is used solely to review the request and send the access link, and is not shared with third parties. Legal basis is Art. 6(1)(f) GDPR. Requests that are not pursued are deleted after review.
Puzzle Builder (selected individuals): Those who receive builder access can store the following data on the operator’s servers (Supabase, USA): display name, optionally an email address for status notifications, created puzzle categories, and the desired publication date. Providing an email address is voluntary. Legal basis is Art. 6(1)(b) GDPR. Data is deleted after the collaboration ends or the access link expires (within 90 days at most). If a created puzzle is published as a daily puzzle, the display name appears on the game page. Deletion on request at any time: info@n-puzzle.com.
5. Analytics
Vercel Web Analytics
This website uses Vercel Web Analytics for anonymized analysis of page views, visitor origin, and device type. Vercel Analytics does not use cookies and does not store personal data. Analysis is fully anonymized. Legal basis is Art. 6(1)(f) GDPR. More information: Vercel Privacy Policy.
Google Search Console
The operator uses Google Search Console (Google LLC, USA) to analyze the visibility of this website in Google Search. No personal user data is processed by the operator. Google only provides aggregated search queries and click data. More information: Google Privacy Policy.
Bing Webmaster Tools
The operator uses Bing Webmaster Tools (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA) to analyze the visibility of this website in Bing Search and in search services built on it. No script and no tracking code is embedded into the website. Site ownership is verified via a static file or a meta tag; no personal user data is processed by the operator. Microsoft only provides aggregated search queries and click data. Legal basis is Art. 6(1)(f) GDPR. More information: Microsoft Privacy Statement.
Discord bot
An optional bot is available for Discord servers. It is added deliberately by a server team; anyone who does not add it is not affected by this section. The operator of this website is the controller. Discord itself is a separate provider with its own privacy policy.
For each server the following is stored: the server ID, the IDs of the channels and messages in use, the chosen language and the settings. The server name, icon and approximate member count are taken once so that the server can be identified during operation.
For individual people, only the Discord user ID is stored, and only once that person taps the button under the daily message or runs the /link command themselves. Display names are not stored. Discord renders names from the ID itself. In addition, that person's daily results are stored: score, number of solved cells and the emoji grid. Game titles are not stored.
The purpose is to show the daily puzzle and the results in the respective server. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the offered service); linking an individual additionally happens at that person's own initiative.
Clicks on the puzzle link in the message are recorded only as a counter per server and day. No IP address, no cookie and no identifier of a person is stored in the process.
Deletion: /unlink deletes your own link and your own results. /remove deletes all data of the entire server. If the bot is removed from a server, that server's data is deleted automatically after a short time. The terms of service for the bot are on a separate page.
6. Plugins and Tools
Fonts (locally hosted)
This site uses the Nunito typeface for consistent typography. The font files are stored locally on this website's server and loaded from there. No connection to Google or any other third-party server is established and no data is transferred to third parties.
Ko-fi
This website embeds a widget from the donation service Ko-fi (Ko-fi Labs Limited, Ireland). The widget is only shown when you reach a streak of at least 3 days. When the widget loads, your browser connects to Ko-fi's servers and your IP address is transmitted. No cookies are set by the operator. More information: Ko-fi Privacy Policy. Legal basis is Art. 6(1)(f) GDPR.
7. Advertising
Affiliate links (partner programs)
This website occasionally contains affiliate links, meaning links to offers from partner shops. Such links are labelled "Ad" directly at the placement. If a purchase is made through one of these links, the operator receives a commission from the respective shop. The price you pay does not change.
n-puzzle.com is a participant in the Amazon Associates programmes in Germany, the United Kingdom and the United States. These programmes are designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon. As an Amazon Associate I earn from qualifying purchases.
Depending on the country you visit from, such a link leads to your local Amazon store. Which store that is follows solely from the time zone or language configured in your browser. Your IP address is not evaluated for this, and no data is transmitted to Amazon unless you actively click the link.
Simply displaying such a notice transmits no data to the partner shop and sets no cookies. Only when you actively click the link are you forwarded to the shop. There, the shop processes your data under its own responsibility and usually sets cookies or similar identifiers in order to attribute the purchase to the operator. The privacy policy of the respective shop then applies, in the case of Amazon: Amazon Privacy Notice.
To measure performance, the operator counts how often such a notice was displayed and clicked. Only anonymous daily totals per language are stored with Supabase (Supabase Inc., USA), without IP address and without any identifier that would allow conclusions about you personally. To avoid counting a single display more than once, a technical marker is stored in your browser's local storage. This marker never leaves your device and can be removed by clearing your browser data. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in funding and evaluating this free service).
Google AdSense
This website uses Google AdSense. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Its parent company is Google LLC, based in the USA. AdSense displays advertisements on the pages of this website. These appear as display ads at the side of the page and, within the games, as full-screen ads (interstitials) at natural breaks in gameplay and as optional rewarded ads that can grant an in-game benefit for watching. Advertisements are labeled as such.
Google AdSense uses cookies and similar recognition technologies (e.g. local storage, tracking pixels, device identifiers). These are used to serve ads and measure their delivery, to prevent abuse and click fraud, and, with your consent, to show interest-based (personalized) advertising. In doing so, Google processes, among other things, your IP address, device and browser information, approximate location, pages visited, and interactions with ads. Google may combine this information with data from other sources. If you do not consent to personalized advertising, contextual, non-personalized ads may be shown instead.
Google AdSense and the storing of or access to information on your device take place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). This consent is obtained before any advertising cookies are set, via a Google-certified consent management platform (CMP) based on the IAB Transparency and Consent Framework. There you can consent, decline, or manage individual purposes and vendors. You can withdraw or adjust your consent at any time with effect for the future by reopening the privacy and cookie settings via the corresponding link on this website.
Personal data may also be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (DPF). In addition, Google relies on standard contractual clauses of the EU Commission for such transfers. Details: policies.google.com/privacy/frameworks.
Cookies and similar identifiers set by AdSense remain on your device until they expire or you delete them. Further information about data processing by Google and the cookie types used is available at policies.google.com/technologies/ads and in the Google Privacy Policy. You can additionally disable personalized advertising in your Google account at adssettings.google.com.
Last updated: July 2026