Your privacy
Website and mobile apps · Updated 7 October 2026
Who we are
THE CAPER CUPBOARD LTD (England and Wales, company number 17483562) operates The Caper Cupboard website and apps. We are responsible for personal information used to run your Caper Cupboard account and service. Contact [email protected] for privacy questions or requests.
A short explanation for families
You can play available guest puzzles without creating an account. Guest answers and favourites are saved on your device where storage is available. Signing in lets supported puzzles save progress to your account. Do not put private information in puzzle answers or send us passwords. Parents and carers should manage accounts and purchases used by children and supervise their use.
Information we use
Account information includes your name, email address, password hash, verification status and sign-in tokens. Puzzle information includes answers, hints, completion status, difficulty, favourites and saved progress, depending on the puzzle and whether you are signed in. Support messages include the information you choose to send. Our server receives IP addresses, request times, device/browser information and error or security logs. We also process membership status, store transaction identifiers and purchase or restoration information. We do not receive your full payment card details from Apple, Google or our hosted Stripe website checkout.
Google and Apple sign-in
When you choose Google or Apple sign-in in a supported app version, the provider authenticates you and sends identity information to us: your name where supplied, email address and a provider account identifier. Apple may supply a private relay email address instead of your usual email. We verify signed identity tokens before granting account access. We do not receive your Google or Apple password and do not request access to your mail, contacts or files.
We store the provider account identifier to reconnect you to the same Caper account. For Apple sign-in, we retain an encrypted refresh token so we can revoke the connected authorisation when you delete your account. Sign-in tokens and authorisation codes are used to verify the request; the Apple refresh token is retained while needed for the connected account and deletion process. Use Your account to connect a provider to an existing account, rather than creating a separate account.
Why we use it
We use account, save and membership information to provide the service you request (performance of a contract). We use technical logs and support correspondence to investigate problems, protect accounts and prevent abuse (our legitimate interests in operating a secure, reliable service). We use records needed for tax, accounting or responding to lawful demands to meet legal obligations. Where optional advertising storage or personalisation requires consent, the relevant advertising provider asks for that consent before using it. Refusing optional consent does not amount to agreeing to personalisation.
Storage on your device
Website sessions and security cookies support sign-in and protect forms. Local browser storage and app storage retain puzzle progress, preferences, favourites and recent games. The native app uses protected device storage for account tokens. Clearing browser/app data can remove local progress; uninstalling the app may also remove it. Signing out does not necessarily remove every guest save. Device or browser settings let you clear stored data.
Purchases and other providers
Apple App Store or Google Play processes native purchases. Stripe processes website subscriptions through hosted checkout and provides a billing portal for payment details, invoices and cancellation. Website checkout associates the purchase with an opaque Caper account identifier and collects the email address, billing information and payment details needed to process the purchase. Stripe Managed Payments is used when available for eligible products; the checkout identifies the payment provider. We retain membership and relevant transaction records, but do not collect full card details in Caper forms. RevenueCat helps verify subscription purchases and restorations using an app user identifier, purchase history and related technical information. Hosting, email delivery and security providers process information needed to deliver and protect the service. We share relevant records when required by law or to handle a dispute. We do not sell account contact details.
Advertising and your choices
The app includes Google AdMob advertising software. Production ad requests remain switched off during final preparation; dedicated owner test builds use sample adverts. When production advertising is enabled, free play can show adverts after results when you choose another puzzle. Premium membership suppresses in-game ads.
Our advertising requests are non-personalised, have a G-rated content limit and disable publisher first-party identifiers. Child/shared-device or unknown-age modes request child-directed and under-age treatment; adult mode uses the provider's applicable consent process. Puzzle age filters describe content and do not establish the player's age. These settings do not mean that advertising uses no data.
Google advertising software may process IP addresses (which can indicate approximate location), device or account identifiers, ad interactions, app interaction information, diagnostic/performance data and consent information. Requests, storage and identifier use depend on audience treatment, device settings and provider consent or limited-ad availability. We do not request personalised advertising.
Advertising privacy choices appear in Help/Profile when Google's consent service requires a privacy-options entry point. You can reopen those choices there. Refusing optional consent does not purchase ad-free play; adverts may still be available through permitted non-personalised or limited-ad serving, or may be unavailable. If consent or an advert cannot be obtained, play continues. Advertising access is checked against current account and membership status.
How long information is kept
Account and account-save information is kept while needed to provide your account, unless you request deletion. Support correspondence is kept while needed to resolve the enquiry and any related complaint. Security logs are kept while needed to investigate faults, abuse or security incidents. Purchase and accounting records may need to remain after account deletion where required by law or to resolve refunds, disputes or fraud. Backup copies may remain until their backup cycle expires. The applicable purpose, legal requirements and any unresolved dispute determine retention; this notice does not promise immediate deletion from every backup or independent store record.
Account deletion
Use the account-deletion option in the app or contact [email protected] from your registered email address. We verify ownership with your password or a connected Google/Apple sign-in, or request appropriate verification for support enquiries. Connected Apple authorisation is revoked as part of account deletion. Deleting a Caper Cupboard account does not itself cancel an Apple, Google or website subscription: manage cancellation through the relevant store or website billing portal. Stores and other providers may retain records under their own policies. You can separately clear locally stored app or browser data.
Processing outside the UK
Apple, Google, Stripe and RevenueCat operate internationally, so related sign-in, purchase or advertising information may be processed outside the UK. Their privacy information explains their international processing and transfer arrangements. Contact us for details about transfers relating to your Caper Cupboard account. We must assess applicable transfer requirements before enabling new production processing; this notice does not describe an unverified hosting location or transfer safeguard as already in place.
Your choices and rights
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal information. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Email [email protected]. These rights have legal exceptions, including records we must keep. You can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/ or call 0303 123 1113.
Changes to this notice
We will update this notice when the service or its data use changes. Material changes will be brought to your attention where required. This notice covers supported sign-in features, current private testing and the production advertising controls described above. Production advert requests remain disabled until final checks are complete.