MindCanvas StudioPrivacy Policy
We collect as little personal data as we can. This page explains what we collect, why, and the choices you have. It covers the website mindcanvaspuzzles.com, our email newsletter, and the publishing app we use to post MindCanvas Studio's own content to social media.
1. Who is responsible for your data
Data controller: C. Marian (trading as MindCanvas Studio)
Location: Europe, Romania
Email: hello@mindcanvaspuzzles.com
hello@mindcanvaspuzzles.com is the contact for all data protection requests, including the rights described in section 8. Our full postal address is available on request by email.
We have not appointed a Data Protection Officer, as we are not required to. Please send any privacy question or request to the email address above.
2. Summary
| What | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| Email address (and first name if you give it), sign-up and confirmation details | Send the free puzzles and our newsletter | Your consent, Art. 6(1)(a) | Until you unsubscribe (see section 3) |
| Server logs (IP address, date and time, page requested, browser) | Run and secure the website | Legitimate interests, Art. 6(1)(f) | 14 days |
| Emails you send us | Answer your question | Legitimate interests, Art. 6(1)(f) | Up to 2 years after the conversation ends |
We do not sell your data, we do not use it for profiling or automated decisions, and we do not use tracking cookies.
3. Email newsletter and free puzzles
When you sign up on our free puzzles page, we collect your email address and, if the form asks for it, your first name. Our email provider also records the date, time and IP address of your sign-up and confirmation, so that we can prove you gave consent.
Consent and double opt-in
We only send emails if you have asked for them. After you sign up, you receive a confirmation email. You are only added to our list once you click the link in that email (double opt-in). If you do not confirm, you are never added to the list, and we remove unconfirmed sign-ups periodically, within a reasonable time.
Once confirmed, you receive the download link for the free puzzles and, from time to time, emails about new books, seasonal puzzles and offers from MindCanvas Studio.
Unsubscribing
Every email has an unsubscribe link. You can also email hello@mindcanvaspuzzles.com and we will remove you. Withdrawing consent does not affect emails sent before you withdrew it.
Email statistics
Like most email services, MailerLite can tell us whether an email was opened and which links were clicked. We use these statistics only in summary form, to improve our emails.
Our email provider (processor)
Our emails and the sign-up form are provided by MailerLite (UAB “MailerLite”, Vilnius, Lithuania), which processes your data on our behalf under a data processing agreement as required by Art. 28 GDPR. The sign-up form is loaded from MailerLite's servers, so your browser connects to MailerLite when you open the free puzzles page, and MailerLite receives your IP address and browser details. MailerLite may use sub-processors, some outside the European Economic Area. Such transfers are protected by safeguards such as the European Commission's Standard Contractual Clauses. See MailerLite's privacy policy (opens in a new tab).
How long we keep it
We keep your subscription data while you are subscribed. When you unsubscribe, you stop receiving emails straight away, and we remove your details from our email provider periodically, within a reasonable time. We keep only a minimal suppression record (your email address, the date and that you unsubscribed) so that we never email you again by mistake, and the record of your consent for up to 3 years, in case we need to show that we had it.
4. Server logs
Like every website, our web server automatically records basic technical information when a page is requested: the IP address, date and time, the page or file requested, the response status, the referring page and your browser's user-agent. We use these logs only to keep the site running, to fix errors and to protect it against abuse. They are deleted automatically after 14 days, unless we need a specific entry to investigate a security incident.
The site is hosted on a virtual server rented from DigitalOcean, LLC, which acts as our processor under its data processing agreement, including Standard Contractual Clauses.
5. Cookies
This website does not use cookies, analytics or tracking pixels. If we ever add any that are not strictly necessary, we will update this policy first and ask for your consent before they are set.
6. Links to Amazon
Our books are sold by Amazon. The “Buy on Amazon” buttons are ordinary links to the book's page on Amazon.com. When you click one, you leave our website, and Amazon's own privacy notice applies to anything you do on Amazon. We do not receive any personal data about you from Amazon, and we cannot see who bought a book.
7. Social media and our publishing app
MindCanvas Studio uses a small publishing app (“the App”) to post its own puzzle videos and images to its own accounts on TikTok, YouTube, Instagram, Facebook and Pinterest, through each platform's official API. The App is used only by MindCanvas Studio. It does not offer sign-in to the public and does not access anyone else's account.
What the App accesses
- The access tokens that the platforms issue when we connect our own accounts.
- Basic profile information of our own accounts (account ID, name, profile picture).
- The videos, images, titles and descriptions we upload, and summary statistics for our own posts (such as views and likes).
The App does not collect, store or share personal data of people who watch, like or comment on our posts. If you interact with our posts, that happens on the platform and is covered by the platform's own privacy policy.
How it is stored and shared
Access tokens and post statistics are stored on our own server with restricted access. They are used only to publish and manage our content. We do not sell this data or share it with third parties, apart from sending our content to the platform it is meant for. We delete tokens when we disconnect an account, and we keep API data only as long as each platform's developer policies allow.
YouTube
The App uses YouTube API Services. By using the App, users agree to be bound by the YouTube Terms of Service (opens in a new tab). Google's handling of data is described in the Google Privacy Policy (opens in a new tab). Anyone who has authorised the App with a Google account can revoke its access at any time through the Google security settings page (opens in a new tab) (https://security.google.com/settings/security/permissions). When access is revoked, the App can no longer use that account. We delete the related stored data promptly once access is revoked, or after a deletion request sent to hello@mindcanvaspuzzles.com. We only ever store the minimum needed to publish MindCanvas Studio's own content.
TikTok
The App uses the TikTok Content Posting API to publish videos to MindCanvas Studio's TikTok account. Access can be removed in the TikTok app under Settings and privacy › Security › Apps and services permissions. See TikTok's privacy policy (opens in a new tab).
Meta (Instagram and Facebook)
The App uses the Meta Graph API (Instagram API and Facebook Pages API) to publish to MindCanvas Studio's Instagram account and Facebook Page. Access can be removed in Facebook Settings › Apps and websites, or in the Instagram app under Settings › Website permissions › Apps and websites. See Meta's privacy policy (opens in a new tab).
The App uses the Pinterest API to create Pins on MindCanvas Studio's own boards. Access can be removed in Pinterest under Settings › Security and logins › Apps. See Pinterest's privacy policy (opens in a new tab).
Data deletion requests
To ask us to delete any data the App holds, email hello@mindcanvaspuzzles.com with the subject “Data deletion”. We will confirm within one month, as GDPR requires, and normally much sooner.
Our social media pages
The footer links to our profiles on these platforms. When you visit them, the platform's privacy policy applies.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict how we use your data;
- receive your data in a portable format;
- object to processing based on our legitimate interests;
- withdraw your consent at any time, for example by unsubscribing.
To use any of these rights, email hello@mindcanvaspuzzles.com. We will reply within one month. We may ask you to confirm your identity first, for example by writing from the email address you subscribed with.
Right to complain
If you think we have not handled your data properly, you can complain to a data protection authority. In Romania this is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, București, Romania, www.dataprotection.ro (opens in a new tab). You can also complain to the authority in the EU country where you live or work. We would appreciate the chance to sort things out first, so please contact us.
9. Children
Our website and newsletter are meant for adults. Please do not sign up to the newsletter if you are under 16.
10. Security
The site is served only over an encrypted connection (HTTPS). Access to our server, our email account and the App is limited to MindCanvas Studio and protected with strong passwords and two-factor authentication where available.
11. Changes to this policy
If we change this policy, we will publish the new version here with a new effective date. If the change is significant, we will tell newsletter subscribers by email.
12. Contact
C. Marian (trading as MindCanvas Studio), Europe, Romania. Email for all data protection requests: hello@mindcanvaspuzzles.com. Full postal address available on request.