Privacy Policy

Reading and account information

You can read public stories without signing in. When you sign in with Google, we receive your Google account identifier, email address, profile name and profile image. We use these to create and authenticate your account. We do not receive your Google password.

For signed-in features, we store puzzle progress, submitted answers, hints used, favorites, completion records, explanation access, credit balances and credit transactions. These records let you continue a case and keep track of feature use.

Public discussion and support

Comments and replies are public and appear with your Google profile name and image. Your email address is not displayed with comments. Do not post a child’s real name, school, contact details, location or other private information. We can hide comments that are reported or otherwise require review.

If you email support, we receive your email address and the information you include. We use it to respond and address your request. Public comments are not a private support channel.

AI messages and answer checks

When you use Puz or submit an answer for AI feedback, we send your text, relevant conversation history and puzzle context to the AI provider configured for the service. Responses and technical request records, including request and response content, are stored to deliver the feature, investigate failures and account for credits. Do not include personal or sensitive information in answers or chats.

AI processing is provided by an external service; it is not a private conversation with a human. The provider can depend on the service configuration. Contact support@kidpuz.com for the provider used for your request and questions about processing. Provider retention and use are subject to its applicable terms; we do not promise that every provider has the same retention or model-training practices.

Cookies, local storage and service providers

KidPuz uses first-party cookies for sign-in and login security. A login challenge lasts up to 10 minutes and an account session up to 30 days. Signing out ends the current session. Browser local storage holds preferences and some local puzzle records until you clear it. Blocking storage may prevent sign-in or saving local settings.

Cloudflare provides hosting, database and file storage. Google provides sign-in and externally hosted fonts. Your browser connects to these services when the relevant resources load, exposing information such as your IP address, browser details and requested resource. Infrastructure providers may process operational and security logs. Google sign-in is loaded on the login page.

Advertising and analytics

We also use Ahrefs Web Analytics on the production website to understand aggregated visits, page views and referral traffic. Your browser connects to Ahrefs when its analytics script loads. According to Ahrefs, this service does not use cookies or store raw IP addresses; it processes IP addresses and browser information to derive a daily visitor identifier and does not link visitors across days. Cookie-free measurement still involves data processing. We do not add account information, answers or chat content to Ahrefs events. Google consent settings do not control the separate Ahrefs script.

On the production website, we use Google Analytics 4 to understand page visits and navigation. Our Google tag defaults to denying analytics storage and all advertising consent categories, with Google signals and advertising personalization disabled. Google may still receive cookieless measurement requests, including page URLs, referrers, device/browser details and network information such as your IP address. Denied cookie storage does not mean that no data is sent to Google. We do not add puzzle answers, Puz messages, email addresses or account identifiers to analytics events.

We do not currently include AdSense ad code, sell your account information or use puzzle answers and Puz chats to build advertising audiences. We do not currently offer a control that grants analytics cookie consent; analytics storage remains denied. You can use your browser’s tracking controls or Google’s Analytics opt-out browser add-on to limit measurement.

If advertising is introduced, this policy and the required privacy controls must be updated before it is enabled. Advertising providers, including Google if used, may use cookies, IP addresses and other identifiers for ad delivery, measurement and fraud prevention. Child-directed content requires appropriate age-restricted treatment; personalized advertising must not be based on children’s activity. Where required, consent must be collected before nonessential advertising storage or processing begins.

Children and parents

KidPuz includes stories intended for children under 13. Children may use account features with a parent or guardian’s involvement. Parents and guardians should supervise online use. Public stories are available without an account. Please do not submit a child’s personal information in a profile, comment, answer or AI conversation.

The current account flow does not verify age or obtain verifiable parental consent. A Google sign-in does not establish parental consent. Parents can contact support@kidpuz.com to request review, access or deletion of a child’s information and to ask that further collection stop. We may need to verify the requester’s relationship to the account. The availability of a sign-in button does not mean that child-specific consent requirements have been fulfilled.

Retention, security and your choices

Account and activity records remain stored to provide saved progress, conversation history, explanation access and credit accounting. There is currently no automatic account-deletion or content-retention schedule. Signing out or clearing your browser does not delete server records. Contact us to request deletion or ask about records associated with your account; we will explain any records that need to be kept for security, disputes or legal obligations.

We use authenticated access and access controls for private records. No online service can guarantee absolute security. Service providers may process data outside your state or country, subject to their infrastructure and applicable obligations.

You can choose to read without signing in, avoid public posting, clear browser storage or request access, correction or deletion by email. Depending on where you live, additional privacy rights may apply. We may verify a request before acting and explain any applicable limitations.

Policy changes and contact

We will update this page when our data practices change and provide additional notice or obtain consent where required. Questions and privacy requests can be sent to support@kidpuz.com.