1. Identity of the Data Controller
This Privacy Policy applies to all products and services provided under the Cargomazepuzzle brand and operated by Pixel Games Sàrl-S, a company established and operating under the laws of the Grand Duchy of Luxembourg.
Registered Office: 11, Nacherwee, L-9644 Dahl, Luxembourg
Customer Support Email: sokoban@cargomazepuzzle.com
Telephone: +352 2648 8488
The Company provides digital entertainment products and services exclusively to customers located within Europe.
2. Scope of this Policy
This Privacy Policy explains how personal information is collected, used, stored, protected, and disclosed when users access the website, create accounts, purchase digital content, or otherwise interact with Cargomazepuzzle services. By accessing the website or utilising our services, users acknowledge the data processing practices described in this Policy.
3. Information We Collect
The Company may collect and process the following categories of personal information necessary to provide our digital services:
Account Identifiers: Name, username, and account profile details;
Contact Information: Email address and communication history;
Transaction & Billing Information: Country of residence, region, billing address, and transaction metadata;
Technical & Network Data: IP address, device identifiers, browser type, and operating system information;
Activity Data: In-game activity logs, gameplay records, and system performance diagnostics.
Note: All payment card details are encrypted and processed directly by our authorised, PCI-DSS compliant payment service providers. Complete credit card data is never stored on the Company’s local servers.
4. Purposes of Processing
Personal information is processed strictly for legitimate operational and compliance purposes, including:
Account creation, authentication, and platform administration;
Executing transactions and facilitating the immediate delivery of digital content;
Verifying transactions to ensure payment security and prevent unauthorized billing;
Providing customer support, diagnostic assistance, and resolving technical enquiries;
Maintaining the security, safety, and operational integrity of the gaming environment;
Complying with applicable accounting, tax, and regulatory obligations in Luxembourg.
The Company maintains a strict anti-spam policy and does not sell, lease, or distribute personal information to third parties for marketing or advertising purposes.
5. Legal Basis for Processing
In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Company processes personal data under the following lawful environments:
Performance of a Contract: To deliver the digital content and services requested by the user;
Compliance with Legal Obligations: To satisfy statutory tax, accounting, and anti-money laundering requirements;
Legitimate Interests: To protect platform security, verify user eligibility, prevent financial irregularities, and defend the Company’s proprietary infrastructure and legal rights.
6. Payment Security and Transaction Verification
To ensure a secure check-out environment for digital commerce, the Company utilises automated transaction monitoring. Due to the immediate and intangible nature of digital fulfillment, we collect and analyse technical telemetry data (including access logs, device parameters, and digital activation timestamps).
This records-retention framework is maintained strictly to establish a verifiable audit trail of successful service delivery, safeguard legitimate cardholders from unauthorised account usage, and satisfy payment network operating standards.
7. Immediate Digital Delivery Record Keeping
The content supplied by Cargomazepuzzle consists exclusively of digital content delivered on a non-tangible medium. In compliance with Article 16(m) of Directive 2011/83/EU, delivery commences immediately upon payment authorisation, and the customer explicitly waives their statutory 14-day right of withdrawal.
The Company processes and securely retains transactional logs confirming the commencement of digital delivery and the consumer’s prior acknowledgement of this waiver solely for statutory compliance and audit record purposes.
8. One-Time Purchases
Unless explicitly stated otherwise at the secure checkout, all transactions conducted on Cargomazepuzzle are single, one-time purchases. No data is processed for recurring billing, subscription profiles, or automatic renewals.
9. Intellectual Property and Licence Records
All virtual assets, in-game items, and digital content are licensed, not sold, granting users a limited, revocable, and non-transferable right of use within the game environment. All intellectual property rights, including source code, game mechanics, animations, sound design, and brand materials, remain the exclusive property of Pixel Games Sàrl-S.
The Company guarantees that all proprietary materials, graphics, and imagery displayed on the platform are either originally created, exclusively owned, or validly licensed under lawful global arrangements. Data logs connected to digital content issuance are maintained to monitor licence compliance and protect against intellectual property infringement.
10. Data Retention
Personal information shall be retained only for as long as reasonably necessary to fulfill the purposes outlined in this Policy, including:
Managing operational account lifecycles;
Satisfying mandatory corporate, tax, and financial auditing laws in Luxembourg;
Maintaining adequate security logs to protect against fraudulent activity;
The establishment, exercise, or defence of legal claims.
11. International Data Transfers
Where necessary for payment processing, security monitoring, server hosting, or customer support, personal data may be processed by trusted service providers operating within the European Economic Area (EEA) or within jurisdictions that ensure an adequate level of data protection approved by the European Commission. All transfers are protected via standard contractual clauses or equivalent legal safeguards.
12. User Rights under GDPR
Subject to specific regulatory conditions under European data protection law, users retain the following statutory rights regarding their personal data:
The right to access and receive a copy of their personal data;
The right to rectify inaccurate or incomplete information;
The right to erasure (“right to be forgotten”);
The right to restrict or object to certain processing activities;
The right to data portability.
To exercise any of these rights, users may contact our Data Protection compliance support at sokoban@cargomazepuzzle.com. Please note that certain data retention mandates may apply where the processing remains necessary to fulfill statutory legal obligations or for the defence of legal claims. Users also have the right to lodge a complaint with a competent supervisory authority, such as the CNPD in Luxembourg.
13. Minimum Age Requirement
The website and all related services are intended exclusively for individuals aged eighteen (18) years or older. The Company does not knowingly process data from minors. If the Company discovers that data has been collected from an individual under the age of 18 without lawful cardholder or parental authorisation, such data will be deleted immediately, and associated access will be revoked in accordance with anti-fraud guidelines.
14. Cookies and Analytical Technologies
The website utilises functional and security-essential cookies to facilitate secure user login, maintain sessions, and prevent technical abuse. Where optional analytical or performance cookies are utilised, users will be provided with an explicit consent mechanism upon their initial visit to the website, in line with European ePrivacy directives.
15. Amendments to this Policy
The Company reserves the right to amend this Privacy Policy periodically to reflect updates in legal frameworks, technological adjustments, or operational updates. The “Last Updated” date at the top of the policy will indicate the latest revision.
16. Governing Law and JurisdictionThis Privacy Policy and all matters relating to data processing shall be governed exclusively by the laws of the Grand Duchy of Luxembourg. Any formal claims or legal controversies arising directly under this Policy shall be subject to the exclusive jurisdiction of the courts of Luxembourg.