There is no account and no Lettra server. Your progress, streaks and settings stay on your device.
The app shows ads (Google AdMob). In the EEA, UK and Switzerland you are asked for consent first; you can reset or delete your Android advertising ID at any time.
We use Google Firebase for pseudonymous usage statistics, remote settings and crash reports. None of this is linked to your name or contact details.
We do not sell your personal information.
1. Who we are and what this policy covers
Lettra (the “app”, “we”, “us”) is a collection of daily word puzzles for Android phones and tablets — Theme Hunt, Honeycomb, Links, Mini Crossword and Five Letters — developed by Erge Akova, an independent developer. If anything here is unclear, contact us at dev.ergeakova@gmail.com.
This policy explains what information is processed when you use the app, why, on what legal basis, with whom it is shared, how long it is kept, and how you can exercise your rights. It applies to the Lettra Android app only. The Lettra iOS app has its own policy. It does not cover the websites or services of the third parties mentioned below, which have their own privacy policies.
2. Information we do not collect
No account or sign-in. We do not ask for your name, email address, phone number, date of birth or any identity document.
No sensitive data. The app does not access your precise location, contacts, photos, camera, microphone, health, fitness or financial data.
No Lettra backend. We do not operate a server or user database. Your game progress is never uploaded to us.
No content you type is sent anywhere. Words you enter while playing are checked on your device against the puzzle and the bundled word lists.
3. Information stored only on your device
The following data is stored locally on your Android device so the app can work. It is not sent to us or to any third party:
Game progress for each puzzle: letters and words found, guesses, hints used, time taken, score or rank, and completion dates.
Streaks and statistics derived from that progress, and any streak repairs you used.
Preferences: puzzle language, haptics and sound settings, daily reminder on/off and time, which “how to play” screens and introductions you have already seen.
Ad frequency counters (for example how many interstitial ads were shown today) and the date you first opened the app, used to limit ads.
Rating request date: the day the app last asked Google Play to show its rating window, so you are not asked again for several months.
Downloaded puzzle packs — a cache of the public puzzle files.
This data is not linked to your identity. It is excluded from Android cloud backups and is permanently removed when you uninstall the app or clear its storage.
4. Information processed by service providers
We use a small number of third-party services. Each receives only what it needs to provide its service.
4.1 Puzzle downloads — GitHub Pages
New puzzles are public, static files hosted on GitHub Pages (GitHub, Inc.). When the app downloads them, GitHub necessarily receives the technical data of any web request, such as your IP address, the time of the request and basic device/network information. The app sends no identifier or personal data with these requests. See the GitHub General Privacy Statement.
4.2 Advertising — Google AdMob
Lettra is free and supported by ads served by Google AdMob (Google LLC / Google Ireland Ltd.).
Ad formats: a small banner at the bottom of the home, game, archive and statistics screens (never in Settings); occasional interstitial ads after you finish a puzzle (limited per day and none on the day you install the app); and optional rewarded ads you choose to watch, for example to get an extra hint, repair a streak or open an archived puzzle.
Data Google may process: device and app information (device model, operating system version, app version, language, region, time zone), IP address and approximate location derived from it, ad interactions (impressions, clicks, rewards) and diagnostic data, and the Android advertising ID (unless you have deleted it in your device settings).
Consent (EEA, UK, Switzerland): before any ad is requested, Google’s User Messaging Platform (UMP) shows a consent form. If you do not consent to personalized ads, you receive non-personalized ads, which are based on context rather than your profile. You can change your choice at any time under Settings → Ad privacy choices in the app.
US state privacy laws: where applicable, the consent platform also lets you opt out of the “sale” or “sharing” of personal information for targeted advertising.
4.3 Usage statistics — Google Analytics for Firebase
We use Google Analytics for Firebase to understand, in aggregate, how the puzzles are played so we can make them better (for example which games are started and finished, and where players get stuck).
Events collected: game screen opened (game, puzzle language, puzzle number, whether it was not started, in progress or finished, and how many days old the puzzle is); puzzle started, completed (game, puzzle language, puzzle number, result, hints used, duration) and abandoned; how-to-play opened; Honeycomb rank reached; hints used; rewarded ads completed or not completed, and offers to unlock a feature with an ad viewed; full-screen ads shown; share button tapped (image or story format); daily completion of every game, streak milestones and lost streaks; archive opened or unlocked; streak repaired; puzzle-language, reminder, sound and haptics changes; app-language settings opened; the app opened from a reminder notification; screens viewed; and content download errors.
User properties: the selected puzzle language and the app interface language.
Automatically collected by Firebase: a pseudonymous app-instance identifier, app version, device model, operating system version, language, country (derived from IP; Google Analytics does not store the IP address itself), first-open time and session information.
What is not collected: no names, contact details or words you type; analytics data is not linked to your identity.
Consent mode: analytics storage is off by default and is turned on only after the consent step (where consent is required, only if you agree). Firebase advertising features (ad storage, ad user data, ad personalization) are always off; analytics data is not used for advertising.
4.4 Remote settings — Firebase Remote Config
The app periodically downloads settings from Firebase Remote Config, for example which games are enabled, ad frequency limits or where puzzles are hosted. To do so, Firebase uses a pseudonymous installation identifier and basic device information. No personal data is sent.
4.5 Crash and error reports — Firebase Crashlytics
If the app crashes or a significant error occurs, Firebase Crashlytics collects a report so we can find and fix the problem. A report contains the stack trace, device state (model, OS version, free memory and disk space, orientation), a pseudonymous installation identifier, a short log of the most recent in-app events listed in 4.3, non-fatal errors (for example a failed puzzle download or save) and the puzzle language. Reports are used only for fixing errors. See Privacy and security in Firebase.
4.6 Notifications
The optional daily reminder and streak reminder are local notifications scheduled on your device. No push-notification server is used and nothing is sent to us. You can turn them off in the app or in Android settings.
4.7 Sharing your result
When you tap Share, the app creates a result image or text on your device and opens the Android share sheet. It contains no answers and no personal data. What you share, and with whom, is your choice; the receiving app processes it under its own policy.
4.8 Rating the app — Google Play In-App Review
After you have finished puzzles on a few different days, the app may ask Google Play to show its rating window (at most once every few months, and never right after a full-screen ad). The window, your star rating and any review are handled entirely by Google Play under the Google Privacy Policy; we do not receive whether you rated the app or what you wrote, other than the public review itself on Google Play.
5. The advertising ID
Google AdMob may use your device’s Android advertising ID to show and measure ads (personalized ads only with your consent where consent is required). You can reset it or delete it at any time in Android Settings → Privacy → Ads (or Settings → Google → Ads); without it, ads are still shown but are not tied to that identifier, and the app works fully. We do not track you across other companies’ apps or websites ourselves.
6. Legal bases for processing (GDPR / UK GDPR)
Consent (Art. 6(1)(a)): personalized advertising, use of the advertising ID for personalized ads, and analytics storage where consent is required. You can withdraw consent at any time; this does not affect processing before withdrawal.
Legitimate interests (Art. 6(1)(f)): non-personalized ads that fund the free app, crash and error reporting, remote settings and the secure, reliable delivery of puzzles. We have balanced these interests against your rights; you may object at any time (see section 11).
Contract (Art. 6(1)(b)): providing the puzzles you use.
For users in Turkey, processing is based on the corresponding grounds of Article 5 of the Personal Data Protection Law No. 6698 (KVKK), and explicit consent where required.
7. International data transfers
Our service providers (Google, GitHub) may process data in the United States and other countries outside your own. Where data from the EEA, UK or Switzerland is transferred, it is protected by the European Commission’s Standard Contractual Clauses and, where applicable, the providers’ certification under the EU–US Data Privacy Framework and its UK and Swiss extensions.
User-level event data is kept for the retention period set in our Google Analytics settings (at most 14 months); aggregated reports may be kept longer.
Crash reports (Crashlytics)
90 days.
Remote Config / installation identifiers
Until the app is deleted or the identifier is inactive, per Firebase’s policies.
Advertising data (AdMob)
According to Google’s retention policies.
Web request logs (GitHub Pages)
According to GitHub’s retention policies.
Emails you send us
As long as needed to answer your request, then deleted.
9. Security
All network connections made by the app use HTTPS. The app contains no Lettra login or account that could be compromised, and on-device data is protected by the Android app sandbox. No method of transmission or storage is completely secure, but we limit the data processed to what is necessary.
10. Children
Lettra is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13 (or under the higher age required in some countries, such as 16 in parts of the EU). If you believe a child has provided personal data, contact dev.ergeakova@gmail.com and we will help remove it.
11. Your rights and choices
Depending on where you live, you may have the following rights. Because we hold no account data and the analytics and crash data are pseudonymous, we may need your help to identify the relevant records (for example the time and device involved).
EEA, UK and Switzerland (GDPR / UK GDPR / FADP): access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, withdrawal of consent, and the right to lodge a complaint with your data protection authority.
Turkey (KVKK, Art. 11): to learn whether your data is processed, request information, learn the purpose, know the third parties it is shared with, request correction or deletion, object to results of automated analysis, claim compensation, and apply to the Personal Data Protection Board (KVKK).
California and other US states (CCPA/CPRA and similar): to know, access, correct and delete personal information, and to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. We do not sell personal information for money. You will not be discriminated against for exercising these rights.
Brazil (LGPD): confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing, and withdrawal of consent.
How to exercise your choices:
Change ad consent: Settings → Ad privacy choices in the app (shown where consent is required).
Reset or delete the advertising ID: Android Settings → Privacy → Ads.
Delete all on-device data: uninstall the app or clear its storage.
Anything else: email dev.ergeakova@gmail.com. We will respond within 30 days (or the period required by your local law).
12. Do Not Track
The app does not respond to browser “Do Not Track” signals because it is not a browser; advertising ID choices are made in Android settings (section 5).
13. Changes to this policy
We may update this policy when the app or the law changes. The current version is always available at this address, with its effective date at the top. If a change materially affects how your data is processed, we will also mention it in the app’s release notes.