PUZZLE 3D Privacy policy — Puzzle 3D ========================== Last updated: September 10, 2026 · Publisher: Charles Venayre Version française : https://hukhymphvuyduftogcpz.supabase.co/functions/v1/legal/confidentialite Puzzle Contest processes the data needed for accounts, shared puzzles, contests, purchases, support and moderation. Offline solo play with the built-in collection does not require an account. No advertising tracking, no third-party advertising or analytics SDK, and no automatic geolocation. 1. WHO IS RESPONSIBLE --------------------- The app and this policy are published by Charles Venayre, an individual based in France, acting as data controller. Contact: charlesvenayre@me.com. 2. PLAYING WITHOUT AN ACCOUNT ----------------------------- You can assemble puzzles from the free collection without an account. Importing a personal photo requires an account and an internet connection for image moderation. Team play and Puzzle Plus purchases require an account; augmented reality requires Puzzle Plus. 3. DATA WE PROCESS WHEN YOU CREATE AN ACCOUNT --------------------------------------------- An account is optional. It lets you add friends, play the same puzzle with someone else in real time and find your puzzles again on another device. Depending on how you use the app, we process: • Account details — your e-mail address, the name you choose to display and an 8-character friend code generated for you. Sign-in is handled by Supabase Auth, either with Sign in with Apple (Apple may give us a relay e-mail address and, on first sign-in, your name) or with an e-mail address and password. Passwords are never stored in clear text. • Shared puzzles — when you share a puzzle or play it as a team, its image is uploaded to a private storage space visible only to the players of that puzzle, together with the puzzle recipe (cut, number of pieces), the position of the pieces and who placed each one. • Friends and invitations — the friend requests you send or accept, the invitations to play you send or receive, and your presence on a puzzle while you are assembling it (so the other player can see you). • Technical identifiers — a user ID generated by our database and, if you allow notifications, a push-notification token so we can tell you when a friend finishes a shared puzzle. • Support data — the app version, build number, platform (iPhone or iPad) and date of last activity stored on your profile, so we can help you. We do not access your device address book, automatically locate your device, collect health data or collect an advertising identifier. We store the country you optionally select on your profile and your in-app friendships, linked to your account, for friends and contest leaderboards. Content reports, report reasons, personal user blocks and automated image-check results are stored for moderation and accessible to administrators. You can report a puzzle or player and manage blocked users in the app. 4. PURCHASES ------------ Credit packs and the subscription are billed by Apple through the App Store. No banking data ever reaches us. Your credit balance is stored on your device. Our server verifies signed Apple subscription transactions and stores the subscription identifier, account identifier, expiry and signature dates to enforce subscription access and the daily challenge quota. We also store challenge starts for this quota. 5. PHOTOS, CAMERA, MOTION AND LOCAL NETWORK ------------------------------------------- • Photo library — the app only receives the photo you pick to turn it into a puzzle. Before creation, the selected image is sent through our server to OpenAI Moderations to detect sexual or violent content. An unverified or rejected image cannot be published. Only selected images are processed; we do not send your photo library. • Camera — used to show the puzzle on your table in augmented reality and to scan a friend's QR code. The camera feed is processed on your device and never leaves it. • Motion — the gyroscope gives the table a subtle 3D relief. Nothing is recorded. • Local network — finding nearby friends who have the app open uses Wi‑Fi and Bluetooth between devices. Nothing goes through our servers. 6. WHY WE USE THESE DATA ------------------------ • Run your account and your shared puzzles (performance of the contract). • Let you and your friends play together in real time (performance of the contract). • Notify you when a teammate finishes a puzzle (your consent, through the system notification permission). • Answer your support requests (legitimate interest). 7. WHERE YOUR DATA IS HOSTED ---------------------------- Your data is stored with Supabase (database, authentication and file storage) in the European Union (region eu-west-1). Push notifications go through Apple's notification service. We do not sell or rent your data to anyone and do not share it with any advertiser. 8. WHAT OTHER PLAYERS CAN SEE ----------------------------- The players you invite to a puzzle, or who join it with your code, can see the puzzle image, its progress and your display name next to the pieces you placed. Your friends can see your display name and the number of puzzles you completed. Contest leaderboards can display your name, selected country and results to other players. There is no public social feed. 9. RETENTION ------------ Your data is kept for as long as your account exists. When you delete your account, your profile, your friendships, your invitations, the puzzles you created and their images are permanently erased from our servers. Apple keeps its own purchase records under its own policy. 10. YOUR RIGHTS --------------- Under the GDPR you have the right to access, rectify, erase and port your data, and to object to or restrict its processing. You can: • edit your display name and remove any shared puzzle directly in the app; • delete your account from the app: My account → Delete my account. Deletion is immediate and irreversible; • write to charlesvenayre@me.com for any other request. We answer within one month. You may also lodge a complaint with the CNIL (cnil.fr (https://www.cnil.fr)) or the data-protection authority of your country. 11. CHILDREN ------------ Puzzle Contest has an App Store age rating of 13+ in most regions, with regional variations shown on the product page. It collects no data specific to children. Creating an account requires an e-mail address. 12. SECURITY ------------ All exchanges between the app and our servers are encrypted (HTTPS). Access to the database is restricted by per-user security rules: only you, the players of your puzzles and, for support purposes, the publisher can access your data. 13. ADVERTISING --------------- 14. CHANGES ----------- This policy may be updated as the app evolves. The date at the top of the page indicates the current version; significant changes are announced in the app. ---------------------------------------- • About Puzzle 3D : https://hukhymphvuyduftogcpz.supabase.co/functions/v1/legal?lang=en • Contact and support : https://hukhymphvuyduftogcpz.supabase.co/functions/v1/legal/contact?lang=en • Terms of use : https://hukhymphvuyduftogcpz.supabase.co/functions/v1/legal/cgu?lang=en © 2026 Charles Venayre · Contact: charlesvenayre@me.com