Privacy Policy

This Privacy Policy explains what information Kandlit collects, how it's used, and your choices around it. Kandlit is operated by an individual based in Tlemcen, Algeria. If you have questions, reach out at hello@kandlit.site.

1. Information we collect

When you create an account, we collect:

• Your email address (for email/password sign-up), or your name and email as provided by Google (for Google sign-in);
• Your subscription tier and billing status, so we know whether your account is Free or Pro;
• A timestamp each time you export a puzzle book, used only to enforce the free-tier daily export limit.

We do not store the contents of your print puzzle books (words, grids, titles, layouts) on our servers. That content lives in your browser while you work, and export happens locally on your device; nothing is uploaded to us when you generate a PDF or image.

Digital puzzles work differently, since they need to be stored so they can be shared and solved by other people. When you create a digital puzzle, we store its title, type, and configuration (which may include the puzzle's answer, grid, or other content depending on the puzzle type), along with the puzzle's creation date and your account as its creator. When you or someone else solves a digital puzzle, we store the result (win, loss, guesses used, time taken) tied to the solver's account if they're signed in, or without any personal identifier if they're not.

2. Payment information

Subscription payments are handled entirely by Paddle, our merchant of record. We receive confirmation of your subscription status from Paddle, but we never see or store your card number or other full payment details.

3. Cookies and local storage

Kandlit doesn't use tracking cookies or third-party analytics. We use your browser's local storage to remember your theme preference (light/dark), keep you signed in, and temporarily preserve an in-progress book so you don't lose your work if you navigate to another page within the app. This data stays on your device.

4. How we use your information

We use the information above to:

• Authenticate you and keep your account secure;
• Provide the correct features and limits based on your subscription tier;
• Enforce free-tier export limits;
• Respond to support requests you send us.

5. Who we share information with

We share the minimum information necessary with the service providers that make Kandlit work:

• Supabase: hosts our authentication system and database (account email, tier, export timestamps, digital puzzle content, and solve attempt data).
• Paddle: handles subscription billing and payment processing.
• Google: if you choose to sign in with Google, Google handles that authentication step.

We don't sell your information, and we don't share it with advertisers.

6. Data retention

We keep your account information for as long as your account is active. If you delete your account, your account data is removed from our systems, aside from records we're required to keep for legal or accounting purposes (such as billing history retained by Paddle).

7. Your choices

You can update your account details, change your password, or delete your account at any time from Settings. You can also contact us at hello@kandlit.site with any privacy request, including access to or deletion of your data.

8. Children's privacy

Kandlit is not intended for children under 13, and we don't knowingly collect information from anyone under that age.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above.

10. Contact

Questions about this Privacy Policy or how your data is handled? Reach us at hello@kandlit.site.