Privacy
This policy is short because there is very little to say. We are a two-product puzzle shop, not an advertising business, and we have no reason to know anything about you beyond what makes your books work.
Last updated 31 August 2026.
Who holds your data
Snowy Mountain Software, a trade name of ZYEYZ, LLC, in Montana, United States. Reach us through the contact form.
What we hold
- Your email address. It is how you sign in and how we send you a book. There is no username; the address is the identifier.
- A display name, if you set one. Optional, and it can be anything you like.
- Your password, hashed. We cannot read it and neither can anyone who takes a copy of the database.
- Which books are yours, and what you have paid. When books go on sale this will be a purchase record: which book, when, and the Stripe reference. We never see or store card numbers.
- Your solving progress. Which register entries you have struck out, which memoranda you have applied, which pages you have cleared, whether you have finished, and any notes you type into the book. This is the state that makes the solving surface work.
- Anything you send us through the contact form. Your name, your address, what it is about and what you wrote, with the time and the IP address it came from. We keep it rather than only emailing it to ourselves, so that a message is never lost to a mail failure. We delete it when it has been dealt with and is no longer useful.
- Ordinary server logs. Requests, with IP addresses, kept short-term for security and debugging.
What we do not hold
No card numbers. No address, no phone number, no date of birth. No advertising or cross-site identifiers. No marketing list, so there is no newsletter to unsubscribe from.
Analytics
We count page views with Umami, which we host ourselves on our own infrastructure. It records the page, the referrer, the country, and the rough browser and screen size. It sets no cookie, it does not follow you between sites, and it does not build a profile of you. Because it sets no cookie and identifies nobody, there is no consent banner to click past.
The tracking script is served from this site's own files rather than from someone else's network, so loading this page does not tell a third party that you were here.
Why there is no address on this site
Every "write to us" here points at a form rather than an email address. That is for our benefit and yours: an address published in a web page is in a scraper's list within a week, and the mailbox it fills up is the one your message has to arrive in. The form checks a few things about how a submission was made: whether a hidden field was filled in, how long the page was open, and how many have arrived from one place. None of those checks involve a third party or leave your browser.
Cookies
Three, and all of them are ours and necessary. A session cookie that keeps you signed in. A CSRF cookie that stops another site from submitting forms as you. And, if you are working the free sample without an account, the same session cookie is what your sample progress is keyed to. Clear it and the sample starts over.
Who else sees it
Almost nobody. Stripe, when payments are live, processes the payment and holds the card details we never see. Our email is sent from our own mail server, not through a hosted email service, so the contents of an account email do not pass through a third party. We do not sell data, we do not share it with advertisers, and we have no analytics or support vendor with a copy of it.
We would hand data over if a valid legal order required it, and we would tell you unless we were forbidden to.
Where it lives, and for how long
On servers we run, in Europe and the United States. We keep your account data for as long as your account exists. Ask us to delete it and we will, within 30 days, except for the minimum purchase record we have to keep for tax and accounting purposes. Server logs roll over in weeks. Analytics data is aggregate and holds nothing that points back at you.
What you can ask for
A copy of what we hold about you, a correction to it, or its deletion. Write to us and we will answer within 30 days. There is no charge and nothing to prove. If you are in the EU, the UK, or California, you have these rights under your own law; we extend the same ones to everybody because keeping two standards would be more work than keeping one.
Children
The site is not directed at children under 13 and we do not knowingly hold data about them. If you believe we have, tell us and we will delete it.
Changes
The date at the top says when this last changed. If a change is significant we will email account holders rather than update the page quietly.