Privacy
Last updated 4 August 2026
Who is responsible
Androla AS, organisation number 925 743 844, Gartnerveien 23, 1356 Bekkestua, Norway, is the data controller. Reach us at orders@remarkablesudoku.com.
What we collect
Your email address, and a record of what you ordered. There are no accounts, no passwords, and no tracking or analytics scripts on this site. We never see or store your card details.
Why we need it
- To send you your files, and to let you download them again later.
- To print the address your pack is licensed to on each page.
- To make sure a returning customer never receives the same puzzle twice. We store a one-way hash of each puzzle against your address, not the puzzle itself.
- To keep the accounting records Norwegian law requires of us.
The legal basis is performance of our contract with you, and our legal obligation to keep accounting records.
Who else processes it
- Paddle is the merchant of record. They take the payment, issue your receipt, and handle sales tax and VAT. We never see your card details.
- Resend delivers the email containing your download link.
- Supabase stores order records and rendered files, in their Stockholm region.
- Google Cloud runs the site and the generator, in Finland.
- Cloudflare provides DNS and forwards mail sent to our address.
Order records and files are held in the EU. Paddle, Resend and Cloudflare are international processors and may transfer data outside the EEA under their own safeguards.
How long we keep it
Order records are kept for as long as Norwegian bookkeeping law requires us to keep them. Rendered files are cached for a limited period and rebuilt on demand afterwards, so clearing a cached file does not affect your ability to download.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we use it. Email us and we will act on it. Deleting your address ends your ability to re-download past orders, because that address is the only identifier we hold.
You may also complain to the Norwegian Data Protection Authority, Datatilsynet.