1. Data controller
Amortoae Petru PFA is the controller for personal data processed through Solve House.
2. Data we process
- Account data: email address, authentication identifiers, account creation and security information.
- Profile, onboarding and competition data: public username/display name, optional bio, preferred difficulty, optional onboarding goals/reasoning preferences and recommendations, onboarding/checklist completion state, puzzle results, scores, streaks, achievements, challenge and Rival connections, tournament entries/results, co-op membership and shared-streak status.
- Community data: Caseboard posts, comments, reactions, reports, creator-case submissions, moderation status and review notes. Public content is visible to other users until removed or hidden.
- Billing data: if Pro billing is enabled, we store a provider subscription/customer identifier, variant, subscription status and relevant renewal/end dates. Payment-card data is handled by the configured payment provider and is not stored in the Solve House database.
- Technical/security data: standard request metadata, server error logs, user agent, session information, first-party product events and rate-limit buckets derived from request/account information.
- Support data: information you send when contacting us.
3. Why we process data
- to authenticate accounts and provide requested gameplay, social, creator and competition features;
- to maintain server-verified results, rankings and entitlements;
- to moderate public content and respond to reports;
- to prevent cheating, fraud, abuse and security incidents;
- to process subscription state when Pro is enabled;
- to respond to support/privacy/legal requests and comply with law.
Depending on the activity, GDPR legal bases may include performance of the service you request, legitimate interests in operating/securing/moderating Solve House, legal obligations and consent where specifically required.
4. Public information
Usernames, ranking statistics, Caseboard content and published community-case author names may be public. Do not put information in public fields that you do not want other people to see. Email addresses are not published by Solve House.
5. Service providers
We use infrastructure processors to operate Solve House, including Supabase for authentication/database services and Hostinger for hosting/delivery. If subscription billing is enabled, Lemon Squeezy is used for checkout/subscription processing. Their own terms and privacy notices apply to their services.
6. Sponsorship and tracking
Solve House may display first-party sponsor placements configured by us. The v3 implementation does not load third-party advertising JavaScript, tracking pixels or advertising identifiers for those placements. Sponsor links can take you to a third-party website, whose privacy practices then apply.
7. International transfers
Some providers may process data outside Romania or the EEA. Where GDPR requires safeguards, the relevant provider transfer mechanisms apply, such as adequacy decisions or standard contractual clauses where available.
8. Retention and account deletion
Account-linked gameplay and social records are retained while needed to provide the service. Account deletion removes authored public community text and deletes the authentication account; related owned rows are designed to cascade or be removed. Some minimized logs, backups, payment records held by payment providers, or records required by law may remain for their applicable retention periods.
Specific retention periods for technical telemetry: first-party product analytics events are kept for up to 90 days; internal server-error diagnostics for up to 90 days; rate-limiting counters for up to 7 days; and unfinished anonymous play sessions for up to 30 days. These records are deleted automatically on a rolling schedule.
9. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection and may withdraw consent where consent is the legal basis. The Profile page provides account-data export and account deletion controls.
10. Complaints
Contact info@solvehouse.online. In Romania you may also complain to ANSPDCP: dataprotection.ro.
11. Children
Accounts are not intended for children under 16. Contact us if you believe a person under 16 created an account.
12. Automated decisions
Solve House automatically calculates entertainment scores, rankings and feature entitlements. These do not produce legal or similarly significant effects and are not used for credit, employment, insurance or comparable decisions.
13. Security
We use HTTPS in production, server-authoritative answer/scoring logic, row-level security on exposed database tables, separation of browser and server credentials, signed webhook verification and rate limiting. No online service can guarantee absolute security.
14. Cookies
See the Cookie Policy. The application is designed around essential authentication/security cookies and first-party telemetry rather than optional advertising cookies.
15. Changes and contact
We may update this policy as providers/features change. Privacy requests: info@solvehouse.online. Policy version: 2026-08-27.