Privacy Notice

Last updated: July 23, 2026

1. Who we are

Numerly - Math Puzzles ("Numerly", "we", "us") operates the Numerly puzzle game, website, and printable puzzle packs (the "Service"). Numerly - Math Puzzles is the data controller for personal data described in this notice.

2. Data we collect

Account data — email address, display name, avatar, and the OAuth identifier if you sign in via Google or Apple.
Gameplay data — puzzles solved, streaks, hint usage, coin balance and transactions, daily-puzzle results, leaderboard entries.
Purchase data — order history for printable packs and coin bundles. Card and billing details are collected by our reseller Paddle, not by us.
Device & usage data — IP address, browser type, device identifiers, referrer, pages viewed, error logs.
Push subscriptions — the web-push endpoint and keys if you opt in to daily reminders.
Support messages — anything you send us via support channels.

3. How and why we use it

Create your account and sync progress across devices — performance of a contract.
Run the leaderboard, streak system, and daily puzzle — performance of a contract.
Process purchases and grant entitlements — performance of a contract.
Prevent fraud, abuse, and security incidents — legitimate interests.
Serve advertising via Google AdSense on eligible pages — consent where required, otherwise legitimate interests.
Send push notifications (only if you opt in) — consent.
Improve puzzles and product experience — legitimate interests.
Comply with legal obligations (tax, accounting, lawful requests) — legal obligation.

4. Who we share it with

Paddle — our Merchant of Record. Paddle processes payments, invoicing, sales tax, refunds, and chargebacks. See Paddle's privacy notice.
Supabase (Lovable Cloud) — hosts our database, authentication, and file storage.
Cloudflare — serves the site and edge functions.
Google (AdSense & OAuth) and Apple (OAuth) — advertising and sign-in providers.
Professional advisers — legal and accounting, where necessary.
Authorities — where required by law.

5. International transfers

Some of our providers are located outside your country of residence, including the United States and the European Economic Area. Where required, transfers rely on Standard Contractual Clauses or equivalent safeguards.

6. Retention

We keep account and gameplay data for as long as your account is active. If you delete your account, we delete or anonymise personal data within 90 days, except where we must keep records for legal, tax, fraud-prevention, or accounting reasons (typically up to 7 years for purchase records). Signed download links expire after 7 days.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. UK/EEA residents also have the right to lodge a complaint with their local supervisory authority. To exercise these rights, contact us via the Settings screen in-app; we will respond within one month.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and row-level security on our database — to protect your data. No system is perfectly secure, so we cannot guarantee absolute security.

9. Cookies & similar technologies

Numerly uses essential cookies and local storage for authentication, gameplay progress, coin balances, and preferences. Google AdSense may set advertising cookies on eligible pages; you can manage advertising personalisation via Google Ads Settings.

10. Children

The Service is not directed at children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes

We may update this notice; material changes will be signalled in-app.

12. Contact

Reach us via the Settings screen in-app. Billing questions: paddle.net.