Privacy Policy

Effective date: July 21, 2026

What we collect

For online puzzles we collect your email address, account identifier, purchases, entitlements, credit balance, unlocked puzzles, saved letters, completion history, streak dates, hints, reminder preferences, and timestamps. If you set a player name, we store it with your profile. Checkout also records order and payment references. Payment card or M-Pesa credentials are handled by Paystack and are not stored by Mseto.

How we use it

We use this information to authenticate you, verify payment, deliver access, restore progress, provide support, prevent fraud, understand product performance, and maintain the reliability of the service. Optional daily and streak emails are sent only when you enable them, and marketing consent is stored separately. We do not sell personal information.

Service providers

Supabase provides authentication and database services. Paystack processes payments. Our hosting provider runs the website. When enabled, PostHog provides privacy-conscious product analytics and Sentry provides error monitoring. These providers receive only the information needed to perform their services under their own security and privacy terms.

Analytics and local storage

With your analytics permission, we may measure page visits, puzzle milestones, checkout steps, and technical failures. You can decline the analytics prompt and continue using the site normally. We do not send crossword answers, saved letters, full payment details, or email addresses as analytics event properties. The free daily puzzle may use browser storage to preserve progress on that device. You can clear it through your browser settings.

Retention and security

Purchase and payment records are retained for accounting, fraud prevention, and dispute handling. Puzzle progress and account access are retained while your account remains active. You can export your player data or request permanent account deletion from account settings. We use access controls and secure account authentication, but no online service can guarantee absolute security.

Your choices and rights

You may request access, correction, export, or deletion of your personal information, subject to records we must retain for legal or accounting reasons. You may also opt out of non-essential marketing messages. Email privacy@crossword.co.ke or support@crossword.co.ke.