Privacy Policy

What stays on your device

Your game data is stored locally on your device and is never uploaded to us. That includes:

• Your puzzle results, scores, and answer history
• Your current and longest streak
• Your settings — difficulty, dark mode, sound, music, reduced motion
• Your Make Your Own setup — the topic, player names, and timer — and any topics you save for reuse
• The letters you missed on yesterday’s puzzle, kept so the next day can show you their answers
• A cache of recent puzzles so the game works offline

Deleting the app (or clearing your browser data on the web) erases all of it permanently. We keep no copy and cannot restore it for you. The one exception to “it stays on your device” is described under Words the game didn’t accept below: those words are sent to us anonymously, without anything that could link them back to you.

Analytics

The iOS app uses PostHog to understand how the game is played. We record a small set of gameplay events: a round starting, ending, or being finished early, a word being submitted — recording only whether it was accepted and, if not, the reason it was rejected, never the word itself — your streak changing, a replay being started, a custom-topic round starting, onboarding completing, a result being shared, an archive puzzle being opened, an archive ad-unlock being started or earned, the home screen’s archive suggestion being tapped, a streak-restore being offered, its ad being started, or a streak being restored, a rewarded ad failing to show — recording only which screen asked for it, why, and Google’s error code — a challenge link being opened, the friends-rank line being tapped, a share reward being granted, the subscription screen being opened or closed, a setting being changed, and a purchase completing or being restored. These events carry only game and app details — the puzzle number, difficulty, how many letters were locked, the score, your current and longest streak counts, which setting was changed and its new value, how a result was shared (which app, and whether the card or the text), which subscription option was chosen, and for custom rounds the player count, timer length, and whether the topic was one of our presets or your own. They never contain your answers, your custom topic’s text, player names, or anything that identifies you. (Words the game didn’t accept are sent separately and anonymously; see the next section.)

PostHog also records when the app is installed, updated, opened, brought to the foreground, or sent to the background. These app-lifecycle events are what let us count how many people play each day; they carry no gameplay data.

PostHog also collects standard technical information such as your device model, operating system version, app version, and a randomly generated identifier for your installation. That identifier is not linked to your real identity.

We have switched off PostHog’s location lookup, so your IP address is not resolved to a country or region. Lettra has no feature that uses where you are, so it is not collected.

The web version at lettra.app uses Vercel Web Analytics, a cookieless page-view counter: it records which pages are visited, the referring site, and coarse device information (browser, operating system, screen size, and country), aggregated by our hosting provider Vercel. It sets no cookies, does not follow you across other sites, and identifies visits only by a temporary anonymous hash that expires within a day. It never sees how you play — your answers, results, and streak stay in your browser.

Words the game didn’t accept

To make sure every fair answer counts, the game tells us about words it didn’t accept, so we can find answers missing from our lists, and checks words our lists don’t know (below). When you type a word on a daily or archive puzzle and the game rejects it, the web version and the iOS app send our server just five things: the word as the game read it (lowercase letters only), its letter, the puzzle’s topic and number, and why it wasn’t accepted.

Nothing that identifies you is sent with it: no device or installation ID, no account, no analytics identifier. Like any request (see Network requests), it reaches our server from your IP address, but the IP address is not stored with the word or passed on. Our server forwards the word to our analytics provider, PostHog, under one fixed label shared by every report, with location lookup off, so reports can’t be linked to you or to each other. We use them only to improve the answer lists.

Words you type in Make Your Own rounds are never sent: the topic there is yours.

Checking words that aren’t on our list. Each puzzle has a list of answers that the game checks on your device. When you type a word that isn’t on it, the game asks our server whether it fits the topic before turning it down. Our server sends just that word and the topic’s description to TypeSafe, an AI service that judges whether the word belongs, and remembers the verdict so everyone who tries that word gets the same answer, that day and whenever the topic returns. As with the reports above, nothing that identifies you is sent: no device ID and no analytics identifier, and TypeSafe never receives your IP address. We keep a record of each word and verdict, under the same fixed label, to improve the answer lists.

Advertising

The free version of the iOS app shows ads from Google AdMob in two places: a rewarded video you can choose to watch to unlock an archive play, and a full-screen ad that may appear after you finish a round, when you leave your result. Ads never interrupt a round in progress, and Lettra Unlimited removes ads entirely. We request non-personalised ads only: ads are selected from context, not from a profile of you, and we do not use the advertising identifier to track you across other apps.

On desktop browsers, lettra.app may show advertising from Google AdSense in the margins beside the game. Ads never appear while a round is being played, and they are not shown on phones or tablets on the web.

Where ads are shown, Google may process device information — such as identifiers, IP address, and coarse ad-performance data — to serve and measure ads and to prevent fraud. This is Google’s processing, not ours: we receive no personal information from it, and Google never receives your puzzle answers, results, or streak.

If you are in the EU, UK, or Switzerland you will be asked for consent before ads are shown, and you can change that choice at any time from the consent notice. You can review or adjust Google’s ad settings at myadcenter.google.com.

Purchases

Lettra Unlimited is sold through the App Store. Payments are handled entirely by Apple — we never see or receive your card details, billing address, or Apple Account credentials.

We use RevenueCat to check whether a purchase is active. RevenueCat assigns your installation a random anonymous ID and receives the receipt information Apple provides. It does not receive your name or email address from us.

Game Center

The iOS app can connect to Apple Game Center to show a daily leaderboard and award achievements. This is optional. You are asked once, after your first finished puzzle, and you can decline — the game is unaffected.

If you connect, your daily score and achievement progress are sent to Apple, and your Game Center nickname becomes visible to other players on the leaderboard. We do not receive your Apple Account details, and we store nothing about your Game Center identity ourselves.

You can disconnect at any time in iOS Settings under Game Center, which also removes you from the leaderboard.

Network requests

The app downloads each day’s puzzle from our puzzle server, and sends words it didn’t accept to lettra.app (above). As with any request on the internet, that server receives your IP address and the request time as part of normal operation. We do not use this to build a profile of you.

What we never do

• We do not sell or rent your data to anyone
• Ad networks never receive your gameplay data — your answers, results, or streak
• We do not track you across other apps or websites
• We do not collect your contacts, photos, location, or microphone

Children

Lettra is suitable for all ages and does not knowingly collect personal information from anyone, including children. Ads in the free app are requested as non-personalised for everyone. Because we hold no personal information ourselves, there is nothing for a parent or guardian to request the deletion of — uninstalling the app removes everything.

Your choices

You can stop all data collection at any time by deleting the app. On iOS you can also limit app tracking system-wide under Settings › Privacy & Security. To remove your local game history without deleting the app, use your device’s option to clear the app’s data.

Changes

If this policy changes in a way that affects how your data is handled, we will update the date at the top of this page and, where the change is significant, note it in the app.

Contact

Questions about this policy can be sent to privacy@lettra.app.