Privacy Policy

Last updated: 2 November 2025

This Privacy Policy describes how ThinkHoos Ltd ("we", "us", or "our") collects, uses, and protects personal information when you use our website https://www.crosswordcook.com ("the Site").

By creating an account or using Crossword Cook, you agree to the terms of this Privacy Policy.

1. Who We Are

Crossword Cook is a trading name of ThinkHoos Ltd, a company registered in England under Company Number 16660315.

We are registered with the Information Commissioner's Office (ICO) under registration number ZB961616.

Contact email: support@crosswordcook.com

ThinkHoos Ltd acts as the data controller for the personal data we collect.

2. Information We Collect

We collect and process the following information:

a) Account Information

• Email address
• Password (securely hashed via Firebase Authentication)

b) Usage Information

• IP address, device, and browser information automatically collected by our hosting and analytics providers (Google Analytics and Firebase Analytics).
• Cookies or local-storage data used to maintain user preferences (e.g. dark/light theme) and login sessions.

c) User-Generated Content

When using the AI crossword generator, you may input text such as themes or prompts. These inputs and the AI-generated outputs are temporarily processed to create your crossword but are not permanently stored at this time. If we later add a save or share feature, this Policy will be updated.

d) AI Processing

When you generate a crossword, your theme input is sent securely to OpenAI's API to generate word lists and clues. OpenAI processes this data in accordance with its API Data Usage Policy, and such data is not used to train OpenAI models.

3. How We Use Your Information

We use your data to:

• Create and manage your account
• Authenticate and secure your access
• Provide and improve our AI crossword services
• Monitor performance and enhance user experience
• Process payments for paid tiers (via Stripe)
• Comply with legal obligations

We do not sell or rent personal data to any third party.

4. Payment Processing

Paid features are handled through Stripe.

When you make a payment, your billing information is processed directly by Stripe in accordance with their Privacy Policy. We do not store or have access to your full payment details.

5. Cookies and Analytics

We use cookies and local storage for:

• Maintaining login sessions
• Remembering theme preferences
• Analytics and performance tracking

Analytics data is collected via Firebase Analytics and Google Analytics, which may use cookies and similar technologies. You can manage or delete cookies through your browser settings.

6. Data Storage and Security

• The Site is hosted on Netlify with encrypted HTTPS connections.
• Backend serverless functions on Netlify process API requests securely.
• User accounts and data are managed through Firebase Authentication and Firebase Database.
• All data is stored securely with access controls and encryption in transit and at rest.
• We take reasonable measures to protect your data from loss, misuse, or unauthorised access.

7. International Access

Crossword Cook is accessible worldwide. Data may be transferred and processed outside your country of residence, including in the United States and the European Economic Area, under adequate protection measures consistent with UK GDPR.

8. Data Retention

• We retain your account data while your account remains active.
• If you delete your account, associated data will be removed within a reasonable timeframe unless retention is required by law.
• Analytics data is retained for 14 months (Google Analytics default).
• Server logs are retained for 30 days.

9. Your Rights (UK GDPR)

You have the right to:

• Access – request a copy of your personal data
• Rectification – correct inaccurate or incomplete data
• Erasure – request deletion of your data
• Restriction – limit how we process your data
• Portability – request transfer of your data to another service
• Objection – object to certain types of processing

To exercise any of these rights, contact us at support@crosswordcook.com.

10. Children's Privacy

Crossword Cook is not directed to children under 13 and we do not knowingly collect personal information from minors. If you believe a child has provided personal data, please contact us so we can delete it.

11. Third-Party Links

Our Site may include links to third-party websites (for example, Stripe or OpenAI). We are not responsible for their privacy practices, and you should review their policies separately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date. Continued use of the Site after changes are published constitutes your acceptance of the revised Policy.

13. Contact Us