Privacy Policy

Privacy at a glance

• Your photos belong to you. We do not claim ownership of your images, sell them, or use them for advertising without your separate, explicit permission.
• Private AI processing. Only requesting an AI version sends your photo and instructions to OpenAI. Our project is excluded from optional model-training and improvement sharing.
• U.S.-only service. Our service and product delivery are restricted to customers in the United States.

1. Information we collect

• Uploaded content and artwork: photos, crop choices, design settings, custom instructions, AI variations, previews, and final print artwork.
• Account information: your identifier, email address, and authentication details managed through our sign-in provider. Email/password and Google sign-in are available.
• Order and payment details: delivery names, addresses, telephone numbers, order history, and payment references. Stripe handles card entry; we do not store full payment card numbers.
• Technical and device logs: IP address, browser and device information, and service logs used for security, troubleshooting, and reliability.
• Support records: messages, support requests, and communication history submitted through our forms or email.

2. How we use your information

We use this information to authenticate your account; maintain private saved designs; render previews and print artwork; generate requested AI versions; process payments and taxes; prepare and fulfill approved orders; communicate about orders and support; prevent abuse; and resolve technical problems.

Verified, signed-in customers can separately choose occasional puzzle news and offers in Support & privacy. Signing up, saving a design, purchasing, or contacting support does not subscribe you. We record your verified account email, consent wording/version, and the time you choose or withdraw consent. Account-based withdrawal removes your email from the active updates list; consent history remains pending the approved retention schedule.

3. Third-party service providers

• Amazon Web Services: cloud hosting, encrypted file storage, account authentication, databases, service logs, and transactional email routing.
• OpenAI API: requested photo transformations and image variations, with optional training and improvement sharing disabled for our project.
• Stripe: hosted checkout, payment processing, and tax calculations.
• Printify and fulfillment partners: receive print files and recipient/delivery details to manufacture and ship your puzzle orders.
• Google Analytics, optional: site usage measurement only after you explicitly opt in using our Analytics preferences controls.
• Google Ads purchase measurement, separately optional: after an additional opt-in, ad-click identifiers, a confirmed purchase amount, currency and random transaction reference help measure advertising results. We do not send customer contact details or artwork for this measurement.

Authorized providers and service operators may process information as needed to run the requested service, investigate problems, provide support, and meet legal obligations.

4. AI processing and model training

When you choose Create a new version, your photo, selected style, and directions are sent securely to OpenAI’s image API. Simply choosing, uploading, or saving a photo does not send it to OpenAI.

Our AI project is excluded from OpenAI’s optional input/output, feedback, and evaluation sharing for model improvement and training. We verified those settings on October 26, 2026. OpenAI states that API inputs and outputs are not used to train its models by default unless opted in. Provider retention is separate: default abuse-monitoring retention is up to 30 days, with legal and safety exceptions. We do not promise zero provider retention. See OpenAI’s API data controls.

5. Data storage, security and retention

Artwork and personal records are stored in private AWS services, encrypted at rest and transferred using HTTPS. Saved-design access is checked against your authenticated account. Upload and viewing links expire; anyone you share an unexpired viewing link with may be able to view it.

Retention and deletion

• Unclaimed uploads: cleanup becomes due after 24 hours. It removes normal access to abandoned uploads; retained storage versions may remain. This is not a guarantee of permanent erasure within 24 to 72 hours.
• AI job records: temporary processing records become eligible for automatic expiry after 30 days. This does not delete saved photos, generated artwork, provider-held records, or every service log.
• Saved designs: photos, versions, and print files currently have no automatic permanent-deletion period. Removing a design hides it from My designs; it does not permanently erase retained files.
• Account deletion: Support & privacy offers a seven-day recovery window or immediate termination of app access without recovery. A new sign-in during the recovery window cancels scheduled deletion. When removal begins, old app tokens are blocked and background cleanup removes eligible account records, saved artwork, and retained storage versions. Cleanup is checked again after outstanding upload links and jobs expire; access termination is immediate, but permanent cleanup is not instantaneous.
• Orders, financial records, support and logs: these records, backups, and audit history remain pending the approved retention schedule. Commercial or legally required records may need to be retained when other data is erased.

Cookies and browser storage

We use functional storage for account access, private drafts, and site updates. Optional Google Analytics loads only after you choose Allow page analytics. Allow analytics & ad measurement additionally permits Google Ads purchase measurement. An existing page-analytics choice does not grant this additional permission. Declining either does not affect sign-in, designs, support, or purchases. Personalized advertising, Google Signals and automatic collection of contact details are not enabled by these choices.

• Analytics preferences: your separate measurement choices, measurement cookies and local transaction references used to prevent duplicate reporting last up to 90 days. Our Analytics properties use two-month user/event retention without extending it on each visit; aggregated reports may remain longer.
• Account cookies: our authentication providers use cookies to support sign-in and secure access.
• Tab session and local draft storage: keep your app session, sign-in transaction, photo copies, and editing settings for recovery. Drafts older than 24 hours are cleaned up when draft recovery runs. Closing a tab ends its normal draft access, but does not immediately erase every stored photo copy.
• Site-update storage: remembers release information, without your photos.

Analytics receives fixed page names and paths, checkout-start events, browser identifiers, and normal connection/browser information. Separate ad-measurement permission allows Google Ads to use ad-click identifiers (gclid, gbraid or wbraid) and receive the paid amount, currency and a random transaction reference after our backend confirms payment. That reference prevents the same purchase being counted again. We do not send photos, AI instructions, customer emails, names, delivery addresses, account identifiers, unrelated URL query values or fragments. Administrator screens are excluded from measurement. Personalized advertising and advertising audiences are not configured by this integration. See how Google uses data from partner sites.

Choosing No thanks through Analytics preferences near the website footer disables measurement and removes this site’s measurement cookies without refreshing your design. Google code that has already loaded remains until the page reloads. Choosing Allow page analytics keeps ad purchase measurement off. Withdrawing in another open tab also disables its measurement. Withdrawal does not erase existing reports. Hosted sign-in and Stripe use their own provider storage.

6. Your data choices and rights

You can request access to or a copy of your information, correction of inaccurate information, or permanent erasure of eligible account and design data. Open Support & privacy, or contact us if you cannot sign in. Account deletion requires a recent sign-in and explicit confirmation. Pending payments must finish or expire first. Paid-order records and artwork needed for those orders are retained separately, as are legally required records, backups, provider-held data, and email already delivered. A request receipt alone does not confirm that cleanup is complete.

You may grant or withdraw optional Analytics permission through Analytics preferences near the website footer. Clear browser data & sign out in Support & privacy clears this site’s local draft and app session; it does not erase cloud records or clear provider sites.

7. United States service and children’s privacy

Puzzles Puzzles Puzzles LLC offers services and product delivery exclusively within the United States. We do not knowingly offer services to or solicit data from people residing outside the U.S.

Our platform is for general audiences and is not intended for children under 13. We do not knowingly collect personal data from children under 13. Ordering requires the adult eligibility described in our Terms of Service.

8. Updates to this policy

We may update this policy as features, providers, or requirements change. Material updates will be highlighted here with a revised last-updated date.

9. Contact us

For questions or privacy requests, email support@3puzzles.com.

Puzzles Puzzles Puzzles LLC

See our Terms of Service, Shipping & Delivery, and Refunds & Replacements.