Privacy Policy
Last updated October 11, 2026
Pen and Games is a tool for making crosswords and Sudoku for print and the web. It's run by Siddhant Mehta Designs, based in Ontario, Canada. This policy says what we collect, why, who helps us run the service, and what you can ask us to do with your information. Questions go to hello@penandgames.com.
What we collect
- Your account. When you sign in with Google we get your name, email address and profile picture.
- Your email address if you join the waitlist.
- What you make and share. Your organizations, projects, puzzles, word choices, clue instructions, logos you upload, and the email addresses of people you invite.
- Messages to us sent through Give feedback, and our replies.
- Credits: what each puzzle cost and who started it.
- Technical data: server logs (IP address, browser, the pages requested) and error reports that help us fix bugs.
- How you use the site: the pages you visit, what you click, your browser and device, and your rough location, through PostHog.
What we don't do
We don't show ads or sell your information.
Cookies
We set one cookie, which keeps you signed in. PostHog sets its own cookies to count visits and show us how people use the site. You can block them in your browser and everything still works. The puzzle player on other people's sites sets none of them.
How we use it
- To run the service: sign you in, store your work, make the puzzles you ask for and the files you download.
- To send the invite emails you ask us to send, and to answer your messages.
- To keep the service secure, fix problems, and approve new organizations.
- To see which pages help people, and make the site better.
AI
When you generate a puzzle or ask for clue ideas, the puzzle's answers, its settings and your clue instructions are sent to OpenAI, which writes the clues. Please don't put personal information in clue instructions. Under OpenAI's API terms, data sent this way isn't used to train its models.
Who helps us run it
These providers process information for us, only to provide their service:
- Supabase: database, sign-in and file storage
- Hetzner: servers
- Trigger.dev: background jobs that generate puzzles
- OpenAI: writing clues
- Resend: invite and waitlist emails
- Sentry: error reports
- PostHog: product analytics
- Google: sign-in
Your information is stored in the United States.
Who can see your work
Members of your organization see its projects and puzzles. People you invite to a single project see only that project. We look at your data only when we need to, to support you or run the service.
How long we keep it
We keep your information while your account is open. When you ask us to delete your account or organization, we delete it within 30 days; backups that hold it expire on their own schedule after that. Logs and error reports are kept for a short time.
Your rights
You can ask us to show you, correct, export or delete your information by writing to hello@penandgames.com. Depending on where you live, for example in Canada, the EU, the UK or California, you may have further rights, including complaining to a privacy regulator.
Children
Pen and Games isn't meant for anyone under 16, and we don't knowingly collect their information.
Changes
If we change this policy we'll update the date above, and tell account holders about significant changes by email or in the app. See also our Terms of Service.