Privacy Policy

• Account information: name, email address, and (if you sign in with Google) basic profile info from your Google account. If you set a public username, it's shown on your creator profile.
• Content you create: the puzzles you build (titles, words/grids/images) and their revision history.
• Gameplay data: when you complete a puzzle, we record the completion time and, if you're signed in, link it to your account so leaderboards and stats can work. We plan to track mistakes and hints used too, but that isn't implemented yet — those aren't collected today. If you're signed out, your completion isn't linked to you or to any cookie or device identifier.
• Billing information: paid plans aren't available for purchase yet (see the pricing page). Once they are, payment details will be handled entirely by our payment processor (Stripe) — we'll never see or store your card number.
• Technical data: standard server logs (IP address, browser type, timestamps) collected by our hosting provider (Cloudflare) for security and reliability. We also store the IP address and browser/device string of each sign-in session in our own database, to help detect suspicious account activity; these are deleted, along with the rest of your account, if you delete it (see §5).

• To operate the Service: hosting your puzzles, running leaderboards, and enforcing plan limits.
• To communicate with you about your account, e.g. security notices or billing receipts.
• To investigate reported content and enforce our Terms of Service.
• To improve the Service, using aggregated, non-identifying usage data.

We don't sell your personal data.

We share data only with the service providers that make GridHearth Create work: Cloudflare (hosting, database, file storage) and Stripe (payment processing, for paid plans). We may also disclose information if required by law.

We use one strictly necessary session cookie to keep you signed in — nothing else. We don't use analytics cookies, third-party advertising cookies, or any cookie to track signed-out players. Because the only cookie we set is strictly necessary for the Service to work, we don't show a cookie-consent banner asking you to opt in to it (most privacy laws don't require consent for strictly necessary cookies) — this section is that disclosure instead.

You can update your profile (including your username) from Settings at any time, and delete your account entirely, yourself, from the same page — see Settings. To request a copy of your data instead, or for anything Settings can't do, contact us at the address below — we'll process the request within a reasonable time, subject to what we need to keep for legal or billing reasons.

GridHearth Create is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has created an account, contact us and we'll remove it.

We may update this policy as the Service evolves. We'll update the date at the top of this page when we do.

Questions about this policy, or a data request? Reach us at support@gridhearth.com.