Privacy Policy
Effective date: August 11, 2026
Infinite Loop Games (“we,” “us,” or “our”) operates Grid Puzzles at grid-puzzles.com (the “Service”). This policy explains how we handle personal information.
Information we collect
Account information. When you create an account, we collect your email address, optional display name, and password. Passwords are stored only as securely hashed values, not as plaintext. If you contact us, we collect the information in your message. We use your email address to send password-reset messages when you request them.
Puzzle and account activity. For account features, we store your account tier, preferences, sign-in time, puzzles viewed, puzzle completions, and any in-progress puzzle state you choose to save.
Usage information. We and our service providers may collect technical and usage information when you use the Service, including IP address, browser and device information, pages viewed, referring URL, timestamps, and cookie or similar identifier data. We use Google Analytics to understand aggregate site use. Google Analytics uses cookies, including the _ga cookie. See Google's Privacy Policy and how Google uses cookies.
Payment information. We use Stripe to process payments for paid subscriptions. Stripe collects the payment and billing information needed to complete a transaction. We do not receive or store full payment-card numbers. We may receive limited payment and subscription information, such as payment status, amount, date, and customer or subscription identifiers, to provide the subscription, handle refunds, prevent fraud, and maintain records. Stripe handles personal information under its own policies; see the Stripe Privacy Center.
How we use and share information
We use information to provide and secure the Service; create and manage accounts; provide saved progress and completion history; process subscriptions; send password-reset messages; understand aggregate usage; respond to support requests; and comply with law and enforce our terms.
We do not sell personal information for money. The Service is supported by advertising, however, and personalized advertising involves disclosing device and usage information to advertising partners. Under some state privacy laws that disclosure is treated as a “sale” or as “sharing” for cross-context behavioral advertising. See Advertising below for what this means and how to opt out.
We share information only as needed to run the Service:
- Stripe processes payments and subscriptions.
- Google Analytics provides aggregate site analytics.
- Google AdSense and its advertising partners serve and measure advertising.
- Brevo delivers password-reset emails.
- Hosting, security, and backup providers host, protect, and back up the Service and its data.
We may also share information when required by law, to protect the Service or people from harm, or in connection with a merger, acquisition, financing, or sale of assets.
Advertising
The Service is supported by advertising. We use Google AdSense to display ads. Google and other third-party vendors are advertising partners that use cookies, device identifiers, and similar technologies to serve, personalize, cap, and measure the ads you see.
Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to the Service and to other sites on the internet. Ads may be personalized, meaning they are selected using information about your prior activity, or non-personalized, meaning they are selected from general context such as the content of the page and an approximate location derived from your IP address. Non-personalized ads still use cookies for frequency capping, aggregated reporting, and fraud prevention.
We do not give advertising partners your email address, display name, password, or puzzle history, and we do not allow ads to be targeted using them.
Paid subscribers see no advertising. While a subscription is active, we do not load any advertising code on the Service for that account, so no advertising cookies or identifiers are set and no request is made to an advertising network.
In the European Economic Area, the United Kingdom, and Switzerland, your consent is required before cookies or similar identifiers are used for personalized advertising. Until that consent is given, personalized ads are not served to you.
You can opt out of personalized advertising from Google in Google My Ad Center or Google Ads Settings, and from many other vendors at aboutads.info/choices and optout.networkadvertising.org. Opting out does not remove ads; it makes them less relevant to you. See also how Google uses information from sites that use its services.
Cookies
We use essential cookies and similar technologies to keep you signed in and protect the Service. Google Analytics also uses analytics cookies, and Google and its advertising partners set advertising cookies and similar identifiers as described under Advertising. You can control cookies through your browser settings, though blocking essential cookies may prevent sign-in or other features from working.
Retention, security, and your choices
We keep account and puzzle information while your account is active and as needed to provide the Service. We may retain limited information longer for security, fraud prevention, legal compliance, dispute resolution, and enforcement. Password-reset tokens expire after 60 minutes, are single-use, and are stored only as hashes. Encrypted off-site database backups are normally retained for 90 days and may persist for up to 365 days if the backup-storage lifecycle rule removes them.
You may update your display name and password through your account. To request access to, correction of, or deletion of your personal information, email [email protected]. We may verify your identity before processing a request and may retain information where law permits or requires it.
We use reasonable administrative, technical, and organizational safeguards to protect information. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.
International transfers and children
We are based in the United States and our service providers may process information in the United States and other countries, which may have different data-protection laws.
The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information to us, contact [email protected].
Changes and contact
We may update this policy from time to time. We will post the updated policy and change its effective date.
For questions or privacy requests, email [email protected].