TermPuzzle
← Back to home ES Get TermPuzzle

Privacy

Privacy Policy

Last updated: July 21, 2026

Who we are

This Privacy Policy explains how TP Labs LLC, a Wyoming limited liability company ("TP Labs", "we", "us"), handles personal data in connection with the TermPuzzle desktop application and the website at termpuzzle.com (together, the "Service"). For data concerning your account, license and billing, TP Labs is the Controller. Contact: support@termpuzzle.com.

In plain language: TermPuzzle is local-first. By default, your code, file contents, terminal output, project contents and AI conversations stay on your machine and are never sent to us. We do collect the limited data needed to run accounts, licensing and billing, plus optional pseudonymous product analytics that runs only if you choose to enable it. One optional, off-by-default feature — Cloud Sync — uploads your workspace definitions (not their contents) so they appear on your other devices.

1. Our local-first principle

TermPuzzle stores your working data on your own device. Unless you explicitly enable an optional cloud feature described below, we do not receive:

The data we do handle is limited to what is listed in Section 2.

2. What we collect, and why

2.1 Account and authentication data — Controller

When you sign in (Google sign-in or email one-time code), we process your email address and authentication identifiers, via our authentication provider Supabase. Purpose: to create and secure your account and sign you in. Legal basis: performance of a contract.

2.2 Billing and purchase data — via Merchant of Record

Purchases are processed by Lemon Squeezy, our Merchant of Record. Lemon Squeezy collects the payment and billing information (name, email, payment method, billing address, taxes) and is the seller of record for payment purposes; its handling of that data is governed by Lemon Squeezy's own privacy policy. From Lemon Squeezy we receive the information needed to grant and manage your License: your license key, subscription status, purchase email and order identifiers. Legal basis: performance of a contract; compliance with tax/accounting law.

2.3 License validation data — Controller

To activate and maintain your Subscription, TermPuzzle periodically validates your License. Each validation sends: license key, subscription identifier, a pseudonymous installation identifier, and the application version. Purpose: subscription verification, Device-limit enforcement, and fraud prevention. Legal basis: performance of a contract; legitimate interest in preventing abuse.

2.4 Product analytics — Controller, opt-in

To improve the Service, TermPuzzle can collect limited product analytics through PostHog, tied to a pseudonymous installation identifier. Analytics may include: application version, operating system and architecture, first launch, activation and workspace creation/launch events, license activation events, purchase events (transaction identifier, amount and currency, with no billing details), and general feature-usage statistics.

Analytics never include: source code, file contents, project names, file paths, terminal commands, terminal output, AI prompts or AI conversations.

Product analytics is off until you choose to enable it. The desktop application asks on first run, and you can change your choice at any time in the application settings; on the website, analytics runs only if you accept it in the consent banner, except for the download count described in Section 4.1. Legal basis: your consent. Because the installation identifier is pseudonymous rather than anonymous, we treat this as personal data.

2.5 Optional Cloud Sync — Processor, opt-in and off by default

Cloud Sync is an optional feature that is off by default. If you sign in and enable it, TermPuzzle synchronizes your workspace definitions across your devices by storing them in our Supabase backend, isolated to your account by row-level security. What is synced:

Cloud Sync does not upload source code or file contents, terminal output or scrollback, AI prompts or conversations, or live terminal I/O — these always remain on your device. Purpose: to make your workspace setup available on your other devices. Legal basis: performance of the sync feature you requested (consent by enabling it). You can stop syncing at any time; see Section 8.

2.6 Website data — Controller

The website at termpuzzle.com is hosted on Vercel and collects standard server logs and website analytics through Google Analytics, Vercel Web Analytics, Mimio, Microsoft Clarity and PostHog. See Section 4 for how we handle cookies and consent.

3. What we never do

4. Cookies and website analytics

On the website, Google Analytics may set cookies to measure traffic. We operate Google Consent Mode: in the European Economic Area, the United Kingdom and Switzerland, analytics storage is denied by default until you consent. Microsoft Clarity, which provides heatmaps and session replay, also uses cookies. In the European Economic Area, the United Kingdom and Switzerland it loads only after you accept analytics cookies and does not load if you decline; elsewhere it loads by default and stops if you decline. Vercel Web Analytics and Mimio are configured to run without advertising cookies; PostHog product analytics runs only after you accept analytics in the consent banner, and stops if you decline or withdraw — except for the download count described in Section 4.1. After you accept analytics, PostHog may store a persistent first-party pseudonymous identifier in your browser (in local storage, not a cookie) to recognise the same browser profile across visits. This identifier does not identify you personally, does not identify your device, does not enable cross-device tracking, and is deleted when you withdraw consent. The desktop application itself does not use advertising cookies.

4.1 Download counting

When you download the application, we record that a download happened, together with the operating system and processor architecture of the build you chose. This count is recorded on our servers when your download is issued. It uses no cookie, stores and reads nothing on your device, contains no advertising data, and does not create a user profile or a reusable identifier — so it does not depend on, and is not affected by, your cookie choice. Its purpose is simply to know how many people download TermPuzzle and for which platform. Legal basis: our legitimate interest in measuring demand for the Service.

If you have accepted analytics in the consent banner, we additionally record the campaign parameters (utm_source, utm_medium, utm_campaign, utm_content) that brought you to the site, and whether the visit came from an advertisement, so that we can tell which channels lead to downloads. We never record the full advertising click identifier, your IP address or your raw user agent.

5. Third-party services (sub-processors)

We rely on the following providers, each under its own terms and privacy policy:

6. International transfers

TP Labs is based in the United States, and our providers may process data in the United States and other countries. Where we transfer personal data from the EEA, UK or Switzerland, we rely on an appropriate transfer mechanism, such as the European Commission's Standard Contractual Clauses.

7. Retention

We keep personal data only as long as needed for the purposes above:

Personal data retention is governed by applicable privacy law and purpose limitation, not by any contractual survival clause.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, port, restrict or object to the processing of your personal data, and to withdraw consent. To exercise them, contact support@termpuzzle.com.

If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority.

9. Children

The Service is not directed to children under 16 (or the age of digital consent in your jurisdiction), and we do not knowingly collect their personal data.

10. Security

We use reasonable technical and organizational measures to protect personal data, including encryption in transit (TLS) and, for locally stored credentials, your operating system's secure storage. No method of transmission or storage is completely secure.

11. Changes to this Policy

We may update this Policy as the product and the law evolve. For material changes we will notify you (by email and/or in-app notice) before they take effect. Each version is dated and archived.

12. Contact

TP Labs LLC
1309 Coffeen Avenue STE 1200
Sheridan, Wyoming 82801, USA
support@termpuzzle.com