Privacy Policy

This Privacy Policy explains how uRiddle collects, uses, shares, and protects information when you visit uriddle.com or use the uRiddle service. In this policy, “uRiddle,” “we,” “us,” and “our” refer to the service and its operator.

The information we receive depends on how you use uRiddle. It may include:

• Account details: your email address, username, password (stored only in hashed form), and, if you use Google sign-in, the account details Google provides such as your verified email, name, profile image, and provider account identifier.
• Profile details: a display name, bio, profile or cover image, website, location, and social profile links you choose to add.
• Content and communications: riddles, answers, clues, explanations, comments, reactions, reports, support requests, newsletter signup, direct messages, and images or other media you upload.
• AI feature inputs: prompts, selections, review feedback, and content you submit when using an AI-powered creation feature.

Please avoid sharing sensitive personal information in public content, messages, prompts, or support requests when it is not needed.

We record activity needed to run the product, including riddle attempts and answers, completion status, hints and reveals, active play time, puzzle sessions, scores, points, XP, levels, streaks, daily check-ins, badges, leaderboard position, and ad-free or VIP status.

We also process social activity such as follows, followers, comment reactions, reports, blocks, conversations, messages, notification status, and the riddles or revisions you create. This helps us save progress, calculate rewards, show community features, and keep uRiddle fair and safe.

Your username, selected profile information, published riddles, comments, badges, scores, and leaderboard activity may be visible to other users or the public. Published contributions can be indexed by search engines and shared outside uRiddle.

Direct messages, draft riddles, private AI generations, account email addresses, and support tickets are not intended to be public, although authorized staff and service providers may access them when necessary to operate, secure, support, or moderate the service. Content submitted for publication or review may be visible to moderators.

When you use uRiddle, we may receive technical information such as IP address, browser and device type, operating system, referring pages, requested URLs, approximate region derived from network information, timestamps, error and performance data, and security events.

uRiddle uses cookies and similar browser storage for sign-in sessions, security, preferences, product operation, measurement, and—where enabled—advertising. Analytics or advertising tools configured on the service may also set or read identifiers. Browser controls can limit cookies, but blocking essential cookies may prevent sign-in or other features from working.

We use information to:

• create and secure accounts, authenticate users, and provide password recovery;
• deliver riddles, puzzles, social features, messages, notifications, support, and newsletters;
• save progress and calculate scores, points, streaks, badges, rankings, and rewards;
• process purchases, activate VIP or ad-free benefits, and keep transaction records;
• generate, analyze, verify, review, and moderate puzzle content;
• detect spam, cheating, fraud, abuse, security threats, and violations of our Terms;
• measure performance and usage, troubleshoot problems, and improve the service; and
• comply with law, enforce our agreements, and protect users, uRiddle, and the public.

Some uRiddle features use artificial intelligence to generate, edit, analyze, moderate, or verify puzzle text and images. This does not mean every interaction on uRiddle is sent to an AI system.

When you choose an AI-powered feature, the prompt, puzzle content, images, instructions, and related technical information needed to provide that feature may be processed by an AI service provider. Providers and models can change over time. Do not include personal or confidential information in an AI prompt unless it is necessary and you are comfortable with that processing.

We share information only as needed with vendors that help us operate uRiddle. Depending on which features are active, these may include providers for hosting, PostgreSQL database services, file or object storage, Google authentication, email delivery, AI processing, analytics, advertising, GIF or media search, fraud and rate-limit protection, background jobs, and customer support.

Payments are processed by Stripe. uRiddle does not store full payment-card details; Stripe receives and processes payment information under its own privacy terms. We may also disclose information when required by law, to protect rights and safety, to investigate abuse, or as part of a merger, financing, acquisition, or transfer of the service, subject to appropriate safeguards. We do not sell your account password or private messages.

uRiddle may display first-party or third-party advertising, including sponsored placements. Ad providers may process device, cookie, impression, click, and approximate location information to deliver, measure, secure, or limit ads. VIP or temporary ad-free access can reduce ads but does not disable essential service processing.

If measurement tools such as Google Analytics, Google Tag Manager, or Meta Pixel are enabled, they may collect usage and device data. If you subscribe to the newsletter or need an account, support, moderation, payment, or security message, we may send email through a transactional email provider. You can unsubscribe from marketing email using the link in the message; essential service messages may still be sent.

We keep information for as long as reasonably needed to provide the service, maintain security, resolve disputes, meet legal or accounting obligations, and enforce our agreements. Retention periods vary by data type and purpose. Backups and logs may persist for a limited period after deletion.

You can request account deletion from your profile settings. The current deletion flow removes authentication access and selected profile data, clears profile media, and marks the account deleted. Some records and contributions may be retained or de-identified where needed for integrity, safety, legal obligations, transaction history, or to avoid breaking community discussions. Published riddles may remain without a personal account association where appropriate. You can also contact support@uriddle.com or use Support.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information, or to withdraw consent where processing relies on consent. You can update many profile details and communication choices directly in uRiddle.

To make a privacy request, email support@uriddle.com or use Support. We may need to verify your identity. Some rights have legal exceptions, and you may be able to complain to your local data protection authority.

uRiddle and its service providers may process information in countries other than the one where you live. Those countries may have different privacy laws. Where required, we use appropriate contractual or legal safeguards for international transfers.

uRiddle is family-friendly and designed to be enjoyable for younger users, but age and consent rules differ by country. If you cannot legally agree to this policy or provide consent on your own, use uRiddle only with the involvement and permission of a parent or guardian.

We do not intentionally ask children for unnecessary sensitive information. Younger users should not post their full name, precise location, school, phone number, or other private details in profiles, riddles, comments, messages, or prompts. Parents or guardians can contact support@uriddle.com with privacy concerns or requests involving a child.

We use administrative, technical, and organizational measures intended to protect information, including hashed passwords, session controls, access restrictions, rate limits, validation, moderation tools, and security logging. No online service can guarantee absolute security. Use a unique password, protect your account, and report suspected unauthorized access promptly.

We may update this policy as uRiddle, its providers, or applicable laws change. We will post the revised policy here and update the date above. If a change is material, we may also provide a notice in the service or by email when appropriate.

Questions or requests about privacy can be sent to uRiddle at support@uriddle.com or through the support page. uRiddle is the service operator; no separate incorporated legal entity or public street address is identified in the service configuration.