PuzzleStudio3D

Privacy

Last updated: October 23, 2026

1. Data controller

2. What data we process

  • Account: your email address. If you sign in with Google, also the name and profile picture Google shares with us.
  • Security: IP address and browser type associated with your session.
  • Your content: the images you upload are processed temporarily in memory to generate the puzzle. If you save a design, we store it along with its thumbnail. We also store the likes you give in the community.
  • Purchases and credits: purchase history (product, amount, status) and credit movements. We never receive your card details: payment is handled by Link (Stripe).
  • Analytics: aggregated usage statistics with Matomo, hosted on our own servers, without cookies, with anonymised IP addresses and respecting your browser's "Do Not Track" setting.
  • Contact: the messages you send us and, if you joined our waiting list, your email.

3. Purposes and legal basis

  • Providing the service and managing your purchases: performance of a contract.
  • Security and abuse prevention: legitimate interest.
  • Aggregated, cookieless usage analytics: legitimate interest.
  • Keeping accounting and tax records: legal obligation.
  • Notices to the waiting list: your consent, which you can withdraw at any time.

We do not sell your data or use it for advertising.

4. Service providers

  • Stripe / Link: payment processing. Link acts as seller of record and processes payment data as an independent controller.
  • Resend: sending sign-in emails.
  • Cloudflare: network, security and forwarding of contact emails.
  • Google: only if you choose to sign in with Google.

Some of these providers may process data outside the European Economic Area; in that case they do so under the safeguards of the GDPR (EU Commission standard contractual clauses or the EU-US Data Privacy Framework).

5. Retention

We keep your data while your account is active. If you ask us to delete it, we will delete your account and designs, except for the purchase records we must keep for the periods required by tax and accounting law. Session data is deleted when the session expires.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, or ask us to delete your account, by writing to [email protected]. If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

7. Cookies

We only use technical cookies, which are necessary for the website to work: the session cookie (to keep you signed in) and the language preference. We do not use advertising or analytics cookies, so no consent banner is needed. The Stripe/Link payment page, which is on its own domain, uses its own cookies.

8. Minors

The service is not intended for children under 14.

9. Changes

If we change this policy, we will publish the new version on this page and, if the changes are significant, we will let you know.