Privacy Policy

1. Introduction

Welcome to LilPuzzler ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

2. Children's Privacy

LilPuzzler is designed for parents, teachers, and educators to create printed activities for children. The online service and user accounts are intended for adults and teens aged 13 or older; a parent, guardian, or educator should operate the service for a child under 13.

We do not knowingly offer accounts to children under 13. If you believe a child has sent us personal information, please contact us so that we can investigate and respond.

3. Information We Collect

LilPuzzler provides both login-less puzzle generation and registered accounts. We collect or process the following information:

• Account Information: If you choose to register, we collect your email address, full name, selected persona (parent, teacher, or homeschool), and marketing preferences (newsletter opt-in).
• Puzzle-generation records: We store the puzzle's settings, content, result, creation time, and—when you are signed in—your account ID. We do not store raw IP addresses or user-agent strings in these records. Please do not enter a child's name, school, address, or other private information into a puzzle topic or word list. The browser checks for a few obvious identifier formats before some requests, but that check cannot find everything.
• Worksheet problem reports: If you report a problem, we store the worksheet reference, selected report category, puzzle type, grade, version, validation summary, and timestamp. We do not ask for report text, screenshots, worksheet words, topic text, child names, or links.
• Usage, device, and analytics data: Google Analytics, Vercel Analytics, and Vercel Speed Insights load only if you choose optional analytics in Cookie preferences. Their processing is governed by their respective terms and privacy information.
• Cookies and local storage: We use necessary storage to manage sessions and remember privacy choices. Optional analytics does not load until you choose it.

4. Data Retention & Security

Retention:Login-less puzzle-generation records are marked to expire after 24 hours; Firestore removes expired records through an asynchronous retention process. Signed-in users' profile and saved-puzzle records are retained until they are deleted or an account-deletion task completes. Starting account deletion immediately disables access and revokes sessions, then a retryable background task removes account-owned worksheet records and private PDF files/tasks before removing the profile and authentication identity. Cloud backups, service logs, and analytics systems may follow separate provider retention schedules, so this is not a promise of immediate removal from every system.

Worksheet problem reports are retained for up to one year for quality and safety review. When an account is deleted, we remove its link from any retained report while keeping the limited, non-identifying quality signal.

Security: We encrypt data in transit via HTTPS and utilize secure cloud partners (Google Cloud and Vercel) to protect your information.

5. User Rights (GDPR & CCPA)

You have the right to access, correct, or delete the personal information we hold about you.

How to Exercise Your Rights: If you have an account, you can manage your profile, delete individual saved puzzles, or start the account-deletion workflow. To request a copy of your information, ask about deletion status, or get help with an anonymous request, contact us at support@lilpuzzler.com and include enough information for us to locate the request without sending unnecessary personal information.

6. Third-Party Services

We share data with trusted third-party subprocessors to deliver our services:

• Firebase Authentication: To manage user identity and sign-ins securely.
• Google Cloud / Firebase: To operate the application, database, and storage.
• Resend: To send transactional emails (e.g. welcome message, password resets).
• Google Analytics, Vercel Analytics, and Vercel Speed Insights: To understand aggregate application usage when you choose optional analytics.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@lilpuzzler.com.