Privacy Policy

1. Who We Are

DailyMuse ("we", "us", "our") operates the puzzle platform at puzzmo.crosskit.top. This policy explains how we collect, use, and protect information when you use our service. We are not affiliated with any other puzzle platform.

If you have questions, contact us at privacy@crosskit.top.

2. What We Collect

We collect only what is necessary to run the game:

• Account data — email address and display name when you register.
• Game data — puzzle completions, scores, streaks, and daily activity. This data is used solely to display your progress and power the leaderboard.
• Subscription data — billing information is processed by our payment provider (Creem). We never store your full card number.
• Log data — standard server logs (IP address, browser type, page path) retained for 30 days for security purposes only.

We do not collect phone numbers, real names, or any government-issued identifiers. Guest play is available with no account.

3. Cookies

4. Your Rights Under GDPR (EEA Residents)

If you are in the European Economic Area, you have the right to:

• Access — request a copy of data we hold about you.
• Rectification — correct inaccurate information.
• Erasure ("right to be forgotten") — delete your account and all associated data.
• Data portability — receive your data in a machine-readable format (JSON).
• Restriction — ask us to pause processing your data.
• Object — object to processing based on legitimate interests.
• Withdraw consent — at any time, where processing is consent-based.

Exercise any right by emailing privacy@crosskit.top. We respond within 30 days as required by GDPR.

5. Your Rights Under CCPA (California Residents)

California residents have the right to:

• Know what categories of personal information we collect.
• Know whether personal information is sold or shared — it is not.
• Opt out of the sale of personal information (we do not sell data).
• Request deletion of personal information.
• Not be discriminated against for exercising these rights.

To submit a request, email privacy@crosskit.top or use the self-service links in the footer.

6. Data Storage & Security

• Your data is stored on servers located in the United States.
• All data in transit is encrypted with TLS 1.2+.
• Puzzle progress and account data are never sold to or shared with third parties.
• Payment data is handled exclusively by Creem (PCI-DSS compliant).

7. Data Retention

We retain account and game data for as long as your account is active. You may request deletion at any time; we will erase your data within 30 days of a verified request. Server logs are automatically purged after 30 days.

8. Third-Party Services

We use a minimal set of third-party services:

• Creem — subscription billing. Their privacy policy governs billing data.
• Google OAuth — optional sign-in method. Their privacy policy applies.

We do not embed analytics SDKs, advertising networks, or social media trackers.

9. Children's Privacy

DailyMuse is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently done so, please contact us immediately.

10. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or a prominent notice on the site. Continued use after changes constitutes acceptance.

11. Contact