Privacy

Last updated 2 October 2026. In plain English. The short version: puzzles you make never reach us. We keep your email and order if you buy, your entry if you claim a challenge prize, and moves in phone games only for as long as the game needs them. No analytics, no advertising, no tracking, and we never sell anything about you.

Who we are

Puzzled Post is run by Kevin Eva, trading as Cadline 360, 11 Louis Botha Street, Bonaeropark, Kempton Park, 1619, South Africa. We decide what happens to your details (in law, the "responsible party" or "controller"). Kevin Eva is our information officer. Contact: [email protected].

What we keep

When you buy from us

• your email address;
• your order: what you bought, the price, the date, the order number and PayFast's payment reference;
• whether you ticked "Don't send me news".

PayFast takes your payment on its own secure page. We never see or keep your card details.

When you buy on Etsy

Etsy gives us your name, the email or Etsy message details and your order. We use them only to deliver and support that order.

When you claim a weekly challenge prize

• your email address;
• the game you picked and your run time;
• a scrambled version of your internet address. We can't turn it back into the address. It stops one person winning many times and shows when consent was given;
• if you tick the marketing box: the exact sentence you agreed to, and when (your consent record).

When you enter an unlock code

If a wrong code is entered, we note your internet address and the number of tries for one hour, to stop people guessing codes. Then it is deleted.

When you write to us

Your email and what you wrote, so we can help you.

Puzzles you make

Never. Puzzles are made on your device and sent by you. They don't pass through us.

Games played on phones

• What passes through us. The name a player types, their moves and their messages pass through our service to reach the other screens in that game. We don't read them, and we don't keep them after the game, except as below.
• Moves between game nights. Moves sent between game nights wait in that game's room until the organiser opens the next game night. Then they are deleted. A room nobody uses for 60 days is deleted with everything in it.
• Saved games. Saved games and campaigns are kept on the organiser's device, not by us.
• Direct links. To keep games fast, phones in the same game may link directly. Like a video call, the devices then see each other's internet address. To find a direct route, each device asks a public connection service (Cloudflare's or Google's) what its internet address is.
• Accounts and nicknames. No account, email or real name is needed to play. Use a nickname. Players under 18 need a parent's or guardian's permission, and players must be 13 or older.

Why we use it, and our legal basis

• To deliver what you bought, send your download link again, and help you. Basis: we need it to do what you asked (performing our agreement with you).
• To keep records the tax authorities require. Basis: the law requires it.
• To run phone games and the challenge, and to stop cheating and code guessing. Basis: our legitimate interest in running fair, working games. We keep as little as possible.
• To send news about our games to people who bought from us, unless they ticked "Don't send me news" or later unsubscribe. Basis: the law allows this for existing customers about similar products. It is always easy to say no.
• To send the weekly challenge and news to prize winners, only if they ticked the separate marketing box. Basis: your consent, which you can take back at any time. The prize never depends on it.

We don't sell, rent or share your details for anyone else's marketing. We don't make automated decisions about you.

How long we keep it

• Orders: 5 years after the purchase. South African tax law requires us to keep business records that long.
• Your email for news: until you unsubscribe or ask us to delete it. A "no" is kept so we never sign you up again.
• Challenge claims (game and run time): 2 years, to settle any question about a prize.
• Phone game moves: until picked up, or 60 days at most.
• Wrong unlock code tries: 1 hour.
• Emails you send us: as long as we need them to help you, and no longer than 2 years.

When you ask us to delete your details, we do it within 30 days. The exception is orders, which the law makes us keep for 5 years.

Who else handles it

We use a few service providers. They may handle your details only to provide their service to us:

• Cloudflare runs this website, our databases and the phone game service.
• PayFast takes payments, under its own privacy policy.
• Resend sends our emails.
• Google (Gmail) holds the emails you send us.
• Etsy handles Etsy orders.

Some of these providers' servers are outside South Africa and outside your country. They protect personal information moved across borders with contracts and safeguards that the law accepts, such as standard contractual clauses. We may also share details if the law requires it, or to protect people from harm.

Keeping it safe

Everything is sent over encrypted connections (https). Only Kevin can see our records. Order links can't be guessed. If your details are ever exposed in a security breach, we will tell you and the authorities as the law requires.

Children

Our shop is for adults. Children may play our games with an adult's permission, but we don't knowingly collect children's details. Players under 13 may not join phone games. If you think a child has given us their details, email us and we will delete them.

Unsubscribe or be deleted

Every email we send has an unsubscribe link. One click, no login, and it works for ever. To have your details deleted, write to [email protected] from the email address we hold.

Your rights

You can ask us to:

• tell you what we hold about you, and give you a copy;
• correct it, or delete it;
• stop or limit how we use it.

You can object to its use, and to marketing at any time. We reply within 30 days and don't charge for this. If you think we have got something wrong, please contact us first so we can put it right.

You can also complain to South Africa's Information Regulator (inforegulator.org.za), or to the data protection authority where you live.

Cookies and saving on your device

We use only strictly necessary cookies, so there is no cookie banner. They:

• unlock a product you bought or a game you won;
• remember you have already won the challenge this week.

Games and puzzle makers save your progress and settings in your own browser, on your device. We can't see that. There are no analytics, advertising or tracking cookies.

Changes

If this page changes in a way that matters, we will say so on it and update the date at the top. If we have your email, we will also email you.