Privacy Policy
Last updated 25 October 2026
Squidpen is an app for learning to write, one stroke at a time. This page says what we keep about you, why, and who helps us keep it. In short: we keep what you need to pick up your learning on any device. We don't show ads, and we don't sell your data.
What we keep
- Your learning: the lessons you finish, your XP, streak and daily goal, your badges, how you're doing with each character, and the answers you gave when you started (such as your goal and writing style).
- Your settings, such as sounds and theme.
- If you make an account: your email address, the name and mascot you pick, and your password, which is stored scrambled so that nobody can read it, us included.
Before you make an account, your progress is kept under a guest account with no name or email attached.
Signing in with Google
When you continue with Google, Google tells us your name, email address and profile picture. We use the email to know it's you, and your first name to suggest a display name, which you can change. We don't use your picture. We never see your Google password, and we get nothing else from your Google account.
Why we keep it
- To save your progress, and bring it back on any device you log in on.
- To send the emails you ask for: confirming your email address, and resetting your password.
We don't use your data for advertising, and we don't share it with anyone except the services below.
Who helps us
- Supabase stores your account and your progress.
- Vercel serves the app.
- Resend sends our emails.
- Google, only if you choose to sign in with it.
Their servers may be in another country than yours. Each of them keeps your data only to do this work for us.
On your device
Squidpen also saves your progress in your browser's storage, so it keeps working offline. Logging out clears it from that device; it stays in your account. Deleting your account clears it too.
Your choices
- You can change your name and mascot on your profile at any time.
- You can delete your account from your profile at any time. It's deleted at once, with everything in it, and it can't be undone. Copies in our database host's backups expire on their own. If you signed in with Google, Google keeps listing Squidpen among your Google Account's connections until you remove it there.
- To get a copy of your data, email us at hello@mail.squidpen.com. We'll reply within 30 days.
Changes
If we change this policy, we'll update the date at the top. If a change matters to how your data is used, we'll tell you in the app first.