Rebus Puzzles Privacy Policy

Welcome to Rebus Puzzles ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. By accessing www.rebus-puzzles.com (the "Site"), you agree to the terms outlined below.

1. Information We Collect

1.1 Information You Provide

When you register, play puzzles, or contact us, we may collect:

• Account Data: Username, email address (solely for account recovery)
• User Content: Submitted puzzle answers, leaderboard scores, and feedback
• Communications: Support inquiries or bug reports

1.2 Automatically Collected Data

• Usage Data: IP address, browser type, device identifiers, timestamps
• Cookies & Tracking:
  • Essential Cookies: Save game progress (e.g., unfinished puzzles)
  • Analytics Cookies: Anonymized data on puzzle popularity (e.g., emoji vs. text puzzle engagement) via Google Analytics (opt-out available)
  • Disabling Cookies: May impair features like progress saving

2. How We Use Your Information

We process data to:

• Deliver Services: Maintain game histories, customize puzzle recommendations
• Improve User Experience: Analyze trends (e.g., difficulty preferences)
• Ensure Security: Prevent cheating/automated attacks via IP monitoring
• Legal Compliance: Respond to lawful requests

3. Data Sharing & Third Parties

We do not sell your data. Limited disclosures occur with:

• Service Providers: Hosting partners (AWS), analytics tools (under strict confidentiality agreements)
• Legal Obligations: If required by court order or government authorities
• Business Transfers: In mergers/acquisitions (users will be notified)

4. Your Rights & Choices

Depending on residency, you may:

• Access/Delete Data: Email [email protected]
• Opt-Out of Marketing: Unsubscribe links in promotional emails
• CCPA/GDPR Requests: Right to know, correct, or restrict processing

5. Data Security

• Encryption: TLS/SSL for all data transmissions
• Retention: Anonymous logs deleted after 30 days; accounts after 2 years of inactivity
• Breach Protocol: 72-hour notification for confirmed incidents

6. Children's Privacy (COPPA)

The Site is not designed for users under 13. Parents may request deletion of inadvertently collected data by contacting us.

7. International Data Transfers

Data may be processed globally but protected via EU Standard Contractual Clauses where applicable.

8. Policy Updates

Material changes will be announced via Site banners 15 days prior. Continued use constitutes acceptance.

Contact Us

Data Protection Officer: [email protected]

Postal Address: [Your Physical Business Address]

Jurisdiction: Disputes governed by California for CCPA .