Draft. This policy is a draft and is still being reviewed. It describes how Sushi Pigeon works today. Questions: hello@sushipigeon.com.

Privacy policy

Last updated 23 October 2026

Sushi Pigeon is made by Way of the Pigeon Ltd, a company based in the United Kingdom ("we", "us"). We are the data controller for the personal data described here. This policy covers the Sushi Pigeon desktop app, the web editor at app.sushipigeon.com, our API at api.sushipigeon.com, share links and this website.

The short version

• You can use Sushi Pigeon without an account. Then your projects stay on your computer and we don't receive them.
• If you make an account, we keep what we need to run it: your email address, your name and picture if you sign in with Google, your plan, and the projects you choose to sync.
• If you use Sushi Pigeon AI, what you ask and the parts of your project it needs are sent to Anthropic to get an answer. We keep only usage counts and cost, not the conversation.
• We never sell your data, and we don't use it for advertising.

What we collect and why

Without an account

The desktop app works offline. Your projects, settings and the local AI model are stored on your computer. The web editor stores projects in your browser's own storage. We don't receive any of this. The app may check our servers for whether online features are available; that request carries no personal data beyond what any web request carries (your IP address, see "Server logs").

Your account

Accounts are optional and are shared across Way of the Pigeon apps: one account works in Sushi Pigeon and in our other apps, such as Collektory. You can sign in in two ways:

• Sign in with Google. We ask Google only for the basic sign-in permissions (openid, email and profile). Google gives us your Google account ID, email address, whether it's verified, your name and your profile picture. We use these only to create your account, sign you in, show who's signed in, and contact you about your account. We don't get access to your Gmail, Drive, contacts or anything else in your Google account.
• Email code. We send a one-time code to your email address.

Sushi Pigeon's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Legal basis: performing our contract with you (running the account you asked for).

Cloud sync, share links and storage

If you turn on cloud sync, the projects you choose (scenes, scripts, art, sound) are stored so they can sync between your devices. If you publish a share link, that build of your game is public to anyone with the link until you remove it. Legal basis: contract.

Sushi Pigeon AI (hosted Claude)

Pige, the in-app helper, can use different AI services. Which one you pick decides where your data goes:

• Local AI runs on your computer. Nothing is sent anywhere.
• Your own key (Gemini, Ollama, an OpenAI-compatible service): the app talks to that service directly under your own agreement with them. We don't see it.
• Sushi Pigeon AI (paid plans): your message, the conversation so far, and the parts of your project Pige needs (for example the scene, a script, or a picture you attach) go through our API server to Anthropic, which runs the Claude model and sends the answer back. We don't store the content of the request or the answer. We record your account, the model, the number of tokens used, the cost and the time, to apply your plan's allowance and fair-use limits. Anthropic processes the request as our service provider under its commercial terms, which say it doesn't train its models on this data. Anthropic may keep requests for a limited time for safety and abuse checks under its own policies.

Legal basis: contract (providing the feature you asked for); legitimate interests (preventing abuse and keeping costs fair).

Payments

When paid plans launch, payments will be handled by a payment provider. We'll receive your plan, its status and a reference, never your full card number. This section will name the provider before paid plans start.

Support emails

If you email us, we keep the conversation to help you and to improve the app. Legal basis: legitimate interests.

Server logs

Like any website, our servers (run on Cloudflare) see your IP address, browser type and the pages or API addresses you request. We use this for security, rate limits and fixing problems. Legal basis: legitimate interests.

This website

sushipigeon.com uses no analytics, no advertising and no tracking cookies.

Who we share data with

Only the service providers we need to run Sushi Pigeon. They act on our instructions:

Provider	What for	Where
Supabase	Accounts and sign-in, the database (plans, AI usage counts), cloud sync and file storage	United States
Cloudflare	Hosting this website, the web editor, the API server and share links	Worldwide network
Anthropic	Running Claude for Sushi Pigeon AI	United States
Google	Sign in with Google (only if you choose it)	Worldwide
Titan (email hosting)	Our support email	Worldwide

We may also share data if the law requires it, or with a buyer if the business is ever sold (you'd be told first). We never sell personal data, and we don't share it with advertisers or data brokers.

International transfers

Some providers process data outside the UK, mainly in the United States. Where they do, we rely on the UK's adequacy regulations (the UK–US data bridge) or the UK International Data Transfer Agreement or Addendum, as offered by each provider.

How long we keep it

• Account data and synced projects: while your account is open. When you delete your account, we delete them within 30 days, apart from backups, which expire on their own within a further 30 days.
• AI usage records: up to 2 years, for billing and fair-use checks.
• Payment records: as long as UK tax law requires (usually 6 years).
• Server logs: a short time, usually days.

Your rights

Under UK GDPR you can ask to see a copy of your data, correct it, delete it, restrict or object to how we use it, and take it with you. Email hello@sushipigeon.com from your account's email address and we'll reply within a month. You can also complain to the UK Information Commissioner's Office at ico.org.uk, though we'd like the chance to help first.

You can remove Sushi Pigeon's access to your Google account at any time at myaccount.google.com/permissions.

Children

You need to be 13 or older to make an account. Younger players can use the app without one. If you think a child under 13 has made an account, email us and we'll delete it.

Security

Data is encrypted in transit (HTTPS). The database uses row-level security, so each account can only reach its own data. Our AI key and other secrets stay on our servers and are never in the app.

Changes

If we change this policy, we'll update the date above. If a change is significant, we'll tell signed-in users in the app or by email before it takes effect.

Contact

Way of the Pigeon Ltd, United Kingdom · hello@sushipigeon.com