Privacy Policy

Last updated: July 11, 2025

Welcome to PuzzleSwap, the puzzle exchange platform for the Austrian Puzzle Association ("Puzzleverein Österreich"). Protecting your private information is our priority. This Statement of Privacy applies to the PuzzleSwap website and governs data collection and usage.

Data Controller

The data controller responsible for processing your data is: Puzzleverein Österreich - Verein zur Förderung des Puzzelns ZVR: 1988846228 Sitz in Graz Email: tauschen@puzzleverein.at

Collection of Your Personal Information

We collect personal data to provide and improve our service. The types of data we collect are:

• Account Information: When you register, we collect your username, email address, and a hashed password. You can voluntarily provide your full name and location.
• User Content: We store the content you create, including details of puzzles you add, your puzzle collection (notes, status), trade offers, and messages exchanged with other users.
• Security Data: To protect our service from malicious activity, our system automatically logs IP addresses and browser information for login attempts.

Use of Your Personal Information

Your data is used for the following purposes:

• To operate the platform and provide its core services, such as user authentication, puzzle listings, and the trading system.
• To enable communication between users for the purpose of trading puzzles.
• To secure the platform and prevent unauthorized access.
• To respond to your feedback and support requests.

Email Communications

PuzzleSwap sends optional email notifications to keep you informed about activity on your account. All email notifications are opt-in and can be controlled from your settings page.

• We may send notifications about: trade requests and responses, puzzle availability updates, and administrative messages (if you're an admin or editor).
• You have full control over which notifications you receive. Visit your settings page to enable or disable specific notification types at any time.
• Emails are sent via Postmark, a trusted email delivery service. We log basic delivery information (recipient, template type, timestamp) for debugging and rate limiting purposes.

Use of Cookies

Our website uses "cookies" to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer.

We use the following types of cookies:

• Strictly Necessary Cookies: These are essential for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website (sessionid) and protect against security threats (csrftoken). You cannot refuse these cookies.

We do not use any cookies for analytics, tracking, or advertising purposes.

Sharing Information with Third Parties

We do not sell, rent or lease our customer lists to third parties. Your data is shared only in the following limited circumstances:

• With other users: Your username and puzzle collection are visible to other registered users to facilitate trading.
• With service providers: We may share data with trusted partners who help us operate our website (e.g., hosting providers), so long as those parties agree to keep this information confidential.

Your Rights Under GDPR

Under GDPR, you have various rights regarding your personal data, including the right to access, correct, or delete your data. To exercise these rights, please contact us at the email address provided above.