Privacy Policy

Last updated: 5 August 2026

This policy explains what personal data Enigmerra collects, why we collect it, and the choices you have. Enigmerra is a daily logic-deduction game. You can play as a guest, without an account, or you can register for a free account.

The operator of this website (the "we"/"us" referred to below) is SOLBAS SERV SRL. For any question about your data, or to exercise your rights, write to us at contact@enigmerra.eu.

What data we collect

If you play as a guest, you don't need to give us any personal details. We assign you a temporary alias for the current session. The state of your deduction grid is stored locally in your browser (local storage), not on our servers, so it stays on your device.

If you create an account, we collect:

• your username and email address;
• the display name and avatar you choose;
• your password, stored only as a secure cryptographic hash. We never store or see your password in plain text.

While you play (with an account), we store gameplay data so the game works and remembers your progress: puzzle attempts, scores, daily streaks, the saved state of your deduction grid, hints you use, your daily-login scrolls and stipend, achievements you unlock, and the rank you earn.

Technical data. When you visit, our server briefly processes your IP address to keep the game secure and to limit abuse (rate limiting). We use it only transiently for that purpose; we do not use it to build a profile of you.

Cookies, analytics and advertising

We use a small number of strictly necessary cookies to run the game and to remember your cookie choice. Analytics cookies and advertising cookies are two separate, optional categories: each loads only if the operator has switched that feature on and you have consented to that specific category. For the full list, including the advertising cookies, and for how to change your choice, see our Cookie Policy.

Advertising

Enigmerra is free to play and may be funded by advertising. When advertising is switched on, our advertising partner is Google (Google Ireland Limited), through the AdSense service. Google acts as an independent controller for the data it processes for advertising purposes.

What this means for you:

• Google, as a third-party vendor, uses cookies and similar identifiers to select, deliver and measure the ads shown on this site, to limit how often you see the same ad, and to detect fraud.
• Ads may be personalised (selected using data about your interests and previous browsing) or non-personalised (selected only from the page content and your approximate location). Personalised advertising happens only where you have consented to it; you can change that choice at any time through the "Manage cookies" link in the footer.
• There is no advertising at all on our legal pages, the contact page, or the account pages (sign-in, registration, profile, history), whatever your settings.
• The DART cookie. Google historically used a cookie called DART to serve ads based on your visits to this and other sites. That role is now taken by newer identifiers (__gads, __gpi, IDE), but the principle is the same and your right is unchanged: you may opt out of personalised advertising at adssettings.google.com. The full list of advertising cookies is in our cookie policy.
• What loads before you consent: only Google's loader script (adsbygoogle.js), present so that the ad network can verify this site. It is preceded by Google Consent Mode v2 signals set to "denied" by default, so it stores no advertising cookies and builds no profile until you accept the advertising category. No actual ad is displayed before you agree.
• You can read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites, control the ads you see at My Ad Center, and opt out of personalised advertising at Google's ad settings.

We do not give Google your account details. Advertising data is collected by Google in your browser through its own tags, under its own privacy policy.

Why we are allowed to use your data (legal bases)

Under the GDPR (Article 6), we rely on:

• Performance of a service (contract): to give you an account and to run the game (progress, scores, streaks, saved grids).
• Legitimate interest: to keep the service secure and prevent abuse (for example, the transient use of your IP address for rate limiting).
• Consent: for analytics cookies and, separately, for advertising cookies and personalised advertising. Both load only after you agree, and you may withdraw either at any time using the "Manage cookies" link in the footer. Withdrawal does not affect processing carried out before you withdrew.

Signing in with Google or Facebook

If you choose to sign in with Google or Facebook, that provider shares basic profile information with us (such as your name and email address) so we can create or connect your account. Your real name is never shown publicly: new accounts receive a generated investigator name, which you can change at any time from your profile. Using social login is always optional.

Who we share data with

We do not sell your personal data, and we do not use it to make automated decisions with legal effects for you. We share data with third parties only in these cases, and only where you have consented:

• Analytics providers listed in our Cookie Policy (Google Analytics / Google Tag Manager, Meta Pixel, Microsoft Clarity, Plausible), if analytics is enabled and you consented to the statistics category.
• Google, as our advertising partner (AdSense), if advertising is enabled and you consented to the advertising category. Where you have allowed personalised advertising, Google may use data about your interests and previous browsing to select the ads you see — that is a form of profiling carried out by Google, not by us, and you can refuse it or withdraw your consent at any time.
• Our hosting provider, which stores the site and its database on our behalf as a processor.

Each of these providers processes data under its own privacy policy. Some of them may transfer data outside the European Economic Area; where that happens, they rely on their own transfer safeguards, such as the European Commission's standard contractual clauses or an adequacy decision.

How long we keep your data

We keep your account and gameplay data for as long as your account exists. If you ask us to delete your account, we remove your personal data. Analytics and advertising data is retained according to each provider's own retention policy; your consent choice is stored in your browser for 180 days.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• have your data erased;
• restrict how we process your data;
• receive your data in a portable format;
• object to certain processing;
• withdraw your consent at any time (this does not affect processing done before you withdrew it);
• lodge a complaint with a supervisory authority. In Romania this is the National Authority for the Supervision of Personal Data Processing (ANSPDCP, www.dataprotection.ro).

To exercise any of these rights, contact us at contact@enigmerra.eu.

Children

Enigmerra is not directed at children under 16. If you are under 16, please use the game only with the consent of a parent or guardian.

Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above.