Privacy Policy

Last updated: November 8, 2026

This Privacy Policy covers Puzzlik Content at content.puzzlik.com (the "Service"), operated by Welsot Solutions ("we", "our", "us"). It explains what data the Service collects, how it uses and protects that data, and how to have it deleted. The Service publishes Puzzlik's chess short videos to the YouTube, Instagram and TikTok accounts that we connect to it. It is used only by us; there is no public sign-up.

1. Information We Collect

When an account is connected through a platform's sign-in and consent screen, the Service receives and stores:

• Access and refresh tokens issued by the platform, with their expiry dates and the permissions (scopes) granted.
• Basic account profile: the account or channel ID, username or handle, display name, profile picture URL and profile URL.
• Publishing records: for each video we publish, the caption or title we sent, the platform's post ID, the link to the post, its status and any error the platform returned.
• Technical logs: a log of the Service's requests to the platforms' APIs and their responses (endpoint, status code, timing, request and response data), with tokens and secrets masked.
• Cookies: one essential session cookie, set only when the operator signs in to the admin page. The public pages set no cookies. We use no analytics or advertising trackers.

The videos themselves are Puzzlik's own content, uploaded by our content pipeline.

2. Permissions We Request

• YouTube (Google): youtube.upload to upload videos to the connected channel, and youtube.readonly to read the connected channel's ID, name, handle and picture.
• Instagram (Meta): instagram_business_basic to read the professional account's ID, username and picture, and instagram_business_content_publish to publish Reels to that account.
• TikTok: user.info.basic to read the account's ID, display name and avatar, and video.publish and video.upload to post videos to that account.

3. How We Use Your Information

• To publish Puzzlik's videos to the connected account, with the caption and settings chosen for each video.
• To show which account is connected, build links to published posts and report each post's status.
• To keep the connection working by refreshing tokens before they expire, and to tell the operator when an account must be reconnected.
• To diagnose failures and keep the Service secure.

We do not use platform data for advertising, profiling or training of AI models. We do not sell it, and we do not share it with anyone except as described in section 5.

4. Google API Services User Data Policy

Puzzlik Content's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The Service uses the YouTube API Services; by connecting a YouTube channel you also agree to the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy. You can revoke the Service's access at any time at myaccount.google.com/permissions.

5. Third-Party Services

• YouTube, Instagram and TikTok: the videos, captions and settings are sent to the platform the video is published on, under that platform's own terms and privacy policy.
• Publora: we may publish to TikTok through Publora, a third-party publishing service; in that case the video, its caption and settings are sent to Publora, which holds its own connection to our TikTok account.
• Hetzner: the Service runs on a server rented from Hetzner Online GmbH in Germany (EU).
• ntfy: the operator receives short status notifications (for example "YouTube needs reconnecting") through ntfy.sh; they contain no tokens.

6. Data Protection

Tokens are encrypted at rest. The Service is reachable only over HTTPS. The API requires a secret key, and the admin page a password. Secrets are never written to logs.

7. Data Retention

• Tokens are kept while the account is connected. Disconnecting an account deletes its tokens immediately.
• Uploaded video files are deleted one day after they are published, and at the latest after 30 days.
• API request logs are deleted after 180 days.
• Publishing records (post IDs and links) are kept while the Service runs, so we know what was published where, unless you ask us to delete them.

8. Data Deletion

You can revoke access from the platform at any time, or ask us to delete all data about your account. See Data deletion for the steps. We complete requests within 30 days.

9. Legal Bases for Processing (For EU Users)

We process this data based on your consent (given on the platform's consent screen, and withdrawable at any time), and on our legitimate interest in publishing our own content to our own accounts.

10. Your Rights

If you are in the European Union, you have the right to access, correct and delete your personal data, to object to or restrict its processing, and to data portability. You may also complain to a data protection authority. To exercise these rights, contact us at hello@puzzlik.com.

11. International Data Transfers

Data is stored in the EU. When a video is published, it is sent to the platform you chose, which may process it outside the EU under its own safeguards.

12. Children's Privacy

The Service is not intended for children under 13, and we do not knowingly collect data from them.

13. Contact Us

Email: hello@puzzlik.com
Address: Welsot Solutions, Boleslawa Chrobrego 37/159, Katowice, Poland

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and change the date at the top.