Legal

Privacy Policy

Last updated: July 29, 2026

1. Who We Are

PuzzlePower (“PuzzlePower”, “we”, “us”, or “our”) is a Shopify application that generates interactive puzzles — word searches, crosswords, cryptograms, and word scrambles — from a store’s product catalog, and lets merchants reward customers who solve them with discount codes or gift cards.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to merchants who install the PuzzlePower app on their Shopify store, to shoppers who play puzzles on a merchant’s storefront, and to visitors of this website.

2. Information We Collect from Merchants

When you install PuzzlePower on your Shopify store, we receive information from Shopify needed to operate the app. This includes your store name and myshopify.com domain, the name and email address of the store owner or staff account that installs the app, and an API access token that lets the app work with your store.

With your authorization, the app reads your product catalog (product titles, descriptions, types, and images) to generate puzzles, and creates discount codes or gift cards in your store when you configure those as puzzle rewards. We also store the puzzle configurations and puzzles you create.

Billing is handled entirely by Shopify. We never see or store your payment card details.

3. Information We Collect from Shoppers (Puzzle Players)

When a shopper plays a puzzle on a merchant’s storefront, we record puzzle completion data such as which puzzle was solved, when it was solved, and how long it took.

If the merchant has enabled email capture or rewards, a shopper may be asked to provide their name and email address so their reward (a discount code or gift card) can be issued and delivered. Providing this information is how rewards are claimed; puzzle play itself does not require it.

Shoppers may separately choose to opt in to marketing communications from the merchant. We record that choice and only mark a shopper as opted in when they have explicitly done so.

4. Information We Collect on This Website

If you use the contact form on this site, we collect the name, email address, subject, and message you submit so we can respond to your inquiry.

Like most websites, our hosting infrastructure keeps standard technical logs (such as IP address, browser type, and pages visited) for security and reliability purposes.

5. How We Use Information

We use the information described above to: operate and maintain the PuzzlePower app; generate puzzles from your product catalog; issue and track puzzle rewards such as discount codes and gift cards; display puzzle statistics, competitions, and player counts where the merchant enables them; provide customer support; and send service communications about the app.

We do not sell personal information, and we do not use shopper data for our own advertising or marketing. Shopper email addresses collected through puzzles belong to the merchant’s relationship with their customer and are used only to deliver rewards and, where the shopper has opted in, to support the merchant’s own marketing.

6. How We Share Information

We share information only with: Shopify, as required to operate an app on the Shopify platform (for example, creating discount codes or gift cards in your store); and service providers that host our application, database, and website infrastructure, who process data on our behalf and are bound by confidentiality obligations.

We may also disclose information if required by law, or as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply to previously collected data.

7. Data Rights & GDPR Compliance

PuzzlePower implements Shopify’s mandatory privacy webhooks. When a customer requests their data through a merchant, we provide the personal data we hold for that customer. When a customer requests erasure, or when a store uninstalls the app, we delete the associated personal data in line with Shopify’s data redaction timelines.

Depending on where you live (for example, the EEA, UK, or California), you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. Shoppers should direct requests to the merchant whose store they visited; merchants and site visitors can contact us directly using the details below, and we will respond in accordance with applicable law.

8. Data Retention

We retain merchant data for as long as the app is installed on your store. When you uninstall PuzzlePower, we delete store data in accordance with Shopify’s redaction schedule. Puzzle completion records and reward history are retained while the app is installed so that reward limits and competition results work correctly, and are deleted along with store data upon uninstall and redaction.

9. Security

We use industry-standard safeguards to protect the information we store, including encrypted connections (HTTPS/TLS) for all data in transit, access tokens stored securely, and access to production systems limited to those who need it. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.

10. Cookies

The puzzle experience embedded in a merchant’s storefront may use cookies or similar browser storage strictly to make the puzzle function (for example, remembering that you already played today’s puzzle). We do not use third-party advertising or tracking cookies.

11. Children’s Privacy

PuzzlePower is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated to merchants through the app or by email.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your information, email us at support@puzzlepro.app or reach out through our contact page. We respond to privacy inquiries within 30 days.