Privacy
Privacy Policy
Rätselinos is built to be launch-ready in Europe. This policy documents how the product handles account data, gameplay data, payments, analytics, cookies and email communication in a DSGVO-conscious way.
Controller and scope
Rätselinos processes personal data required to run Sudoku gameplay, user accounts, premium purchases, printable downloads, streaks, leaderboards and onboarding communication.
Data categories
We may process account data such as email address and display name, gameplay progress, leaderboard submissions, achievement history, billing metadata, cookie consent choices and support requests.
Supabase
Supabase is used for authentication, profile records, puzzle data, subscriptions, achievements, sessions and administrative tools. Data is processed to provide the product and secure access.
Stripe
Stripe processes premium subscriptions, lifetime purchases and printable packs. Rätselinos stores payment metadata such as Stripe customer IDs, subscription IDs, checkout sessions, amounts and purchase types, but not raw card details.
Analytics and experiments
PostHog is used for product analytics and A/B testing only after analytics consent. Facebook Pixel is loaded only after marketing consent. Necessary cookies remain active for security, auth and consent storage.
Email and onboarding
Resend may be used to deliver branded onboarding emails, account-related communication and lifecycle messages. Campaign sends are tracked to avoid duplicate emails.
Legal basis
Processing required to operate the service is performed on the basis of contract performance or legitimate interests. Optional analytics and marketing processing is consent-based and can be changed through the cookie settings UI.
Data subject rights
Users can request access, correction, deletion, restriction or export of their personal data and can withdraw consent for analytics or marketing cookies at any time through the cookie banner or settings.