Misled

Legal

Privacy Notice

Last updated: 12 September 2026

1. Who we are

This Privacy Notice is maintained by Kris Green, trading as Misled ("we", "us", "our"). We are the data controller for the personal data collected through the Misled website and services.

2. What personal data we collect

We collect the following personal data:

  • Account data: email address, display name, and password (handled securely by our authentication provider).
  • Usage data: puzzle progress, solving sessions, and feature interactions.
  • Device and log data: IP address, browser type, and approximate location derived from your IP for security and analytics.
  • Communication data: messages you send to us, such as support requests or feedback.
  • Payment data: our Merchant of Record, Paddle, processes payment information. We do not store full payment card details on our own systems.

3. How we use your data

We use personal data for the following purposes and legal bases:

  • Providing the service: creating and managing your account, saving puzzle progress, and enabling co-solving (legal basis: contract performance).
  • Security and fraud prevention: monitoring for abuse, protecting accounts, and maintaining service integrity (legal basis: legitimate interests and legal obligation).
  • Customer support: responding to your questions and resolving issues (legal basis: contract performance and legitimate interests).
  • Product improvement: understanding how the service is used to improve puzzles and features (legal basis: legitimate interests).
  • Marketing: where you have opted in, we may send you updates about new puzzles or features (legal basis: consent, which you can withdraw at any time).

4. Who we share data with

We share personal data only with the following categories of recipients:

  • Service providers: hosting, authentication, analytics, and support tooling providers that process data on our behalf under appropriate safeguards.
  • Paddle: our Merchant of Record for payment processing, subscription management, tax compliance, and invoicing.
  • Professional advisers: legal, accounting, or other advisers where necessary.
  • Authorities: law enforcement or regulators when required by law or to protect our rights.

5. International transfers

Some of our service providers may process data outside Canada. Where this happens, we rely on appropriate safeguards, such as contractual commitments, to protect your data in accordance with Canadian privacy law.

6. Data retention

We keep your personal data for as long as necessary to provide the service and fulfill the purposes described above. Account data is retained while your account is active; after you delete your account or it becomes inactive for an extended period, we delete or anonymise the data, except where we need to retain it for legal, tax, or security reasons.

7. Your rights

Under Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Withdraw consent at any time, where processing is based on consent.
  • Challenge our compliance with applicable privacy laws.

We aim to respond to requests within 30 days. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and secure authentication. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Cookies and analytics

We use essential cookies to keep you signed in and maintain your session. We may also use analytics cookies to understand how the service is used. You can manage cookie preferences through your browser settings. Essential cookies cannot be disabled without affecting account functionality.

10. Changes to this notice

We may update this Privacy Notice from time to time. We will post the updated version on this page with a revised date. Material changes will be communicated to you where appropriate.

11. Contact

For privacy questions or to exercise your rights, please contact us at hello@misled.me.