Privacy Policy

Last updated: 2025-01-01

1. Who We Are

Puzzle Platform ("we", "us", "our") operates the website at https://buymaria.com. We publish puzzle books and provide puzzle-generation software as a subscription service.

2. Information We Collect

Email address — collected when you register, subscribe to our newsletter, or place an order.
Display name — optional; set in your account settings.
IP address — recorded with each request for security, rate-limiting, and fraud prevention.
Usage data — pages visited, features used, puzzle types generated. Collected only if you consent to analytics cookies.
Payment data — we do not store card numbers. All payment processing is handled by Stripe, who are the data controller for payment information.
Generated puzzle files — PDF files you generate are stored temporarily in our secure storage and are accessible only to your account.

3. How We Use Your Information

To operate your account and deliver our services
To send you passwordless sign-in links and account notifications
To process orders and subscriptions through Stripe
To send our newsletter if you have opted in (you can unsubscribe at any time)
To prevent fraud and abuse, and to enforce our Terms of Service
To analyse how our site is used and improve it (only with your consent)

4. Third-Party Services

Stripe — payment processing. Stripe Privacy Policy.
Google Analytics 4 — website analytics, loaded only after you accept cookies and using Consent Mode v2. Google Privacy Policy.
Hostinger — our web hosting provider. Servers are in the EU/US.

5. Cookies

We use essential cookies for session management and CSRF protection, and optional analytics cookies (Google Analytics). See our Cookie Policy for full details.

6. Data Retention

Account data is retained while your account is active. Email subscriber records are retained until you unsubscribe and request deletion. Generated PDF files are deleted after 30 days of inactivity.

7. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise these rights, email us at noreply@buymaria.com. We will respond within 30 days.

8. Do Not Sell or Share My Personal Information (CCPA)

We do not sell personal information. We share data only with service providers (Stripe, Google Analytics) as described above, under contractual data processing terms. California residents may contact us to opt out of any future data sales at noreply@buymaria.com.

9. Children's Privacy

Our service is not directed at children under 13. We do not knowingly collect personal data from children.

10. Changes to This Policy

We will post updates to this page and update the "last updated" date. Continued use of our service after changes constitutes acceptance.

11. Contact

Questions? Email us at noreply@buymaria.com or use our contact form.