Privacy Policy

Cryptic AI operates Cryptic AI at www.crypticai.uk. This policy explains how we handle personal data when you use the service.

Contact: privacy@crypticai.uk

• Account data: email address and a hashed password when you register.
• Usage data: credits balance, free spins used, clues you archive (inspiration, clue text, answer, fodder, rating), and server logs (e.g. IP address, timestamps) for security and debugging.
• Generation content: inspiration themes and prompts you submit are sent to our AI provider to generate clues.
• Payment data: we do not store card numbers. Stripe processes payments and shares transaction references with us (e.g. amount, status, your email).

• To create and manage your account and verify your email (contract).
• To provide clue generation, credits, and the archive (contract).
• To send verification and purchase receipt emails (contract).
• To keep the service secure and prevent abuse (legitimate interests).

• Anthropic — processes your inspiration and prompts to generate clues.
• Stripe — payment processing when you buy credits.
• Resend (or our email provider) — transactional emails such as verification and receipts.
• Railway (or our hosting provider) — stores the application database on infrastructure in supported regions.

We do not sell your personal data.

We use a strictly necessary session cookie when you sign in so you stay logged in. It is httpOnly and secure in production. We do not use analytics or advertising cookies on Cryptic AI at this time.

When you buy credits, you are redirected to Stripe, which may set its own cookies on Stripe's domain to complete payment.

We keep your account and archived clues until you delete your account. Verification tokens expire automatically. Payment records may be kept as long as needed for tax, accounting, and dispute handling.

Under UK data protection law you may have the right to access, correct, erase, restrict, or object to certain processing, and to data portability where applicable.

You can delete your account at any time from the account menu in the app. You may also contact us at privacy@crypticai.uk. You have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

We may update this policy from time to time. We will post the new version on this page with an updated date. Significant changes may also be notified by email where appropriate.

See also our Terms of Service.