There is no account and no Lettra server. Your progress, streaks and settings stay on your device.
The app shows ads (Google AdMob). In the EEA, UK and Switzerland you are asked for consent first; on iOS the advertising identifier is used only if you allow tracking.
We use Google Firebase for pseudonymous usage statistics, remote settings and crash reports. None of this is linked to your name or contact details.
We do not sell your personal information.
1. Who we are and what this policy covers
Lettra (the “app”, “we”, “us”) is a collection of daily word puzzles for iPhone and iPad — Theme Hunt, Honeycomb, Links, Mini Crossword and Five Letters — developed by Erge Akova, an independent developer. If anything here is unclear, contact us at dev.ergeakova@gmail.com.
This policy explains what information is processed when you use the app, why, on what legal basis, with whom it is shared, how long it is kept, and how you can exercise your rights. It applies to the Lettra iOS app only. It does not cover the websites or services of the third parties mentioned below, which have their own privacy policies.
2. Information we do not collect
No account or sign-in. We do not ask for your name, email address, phone number, date of birth or any identity document.
No sensitive data. The app does not access your precise location, contacts, photos, camera, microphone, health, fitness or financial data.
No Lettra backend. We do not operate a server or user database. Your game progress is never uploaded to us.
No content you type is sent anywhere. Words you enter while playing are checked on your device against the puzzle and the bundled word lists.
3. Information stored only on your device
The following data is stored locally on your iPhone or iPad so the app can work. It is not sent to us or to any third party:
Game progress for each puzzle: letters and words found, guesses, hints used, time taken, score or rank, and completion dates.
Streaks and statistics derived from that progress, and any streak repairs you used.
Preferences: puzzle language, haptics and sound settings, daily reminder on/off and time, which “how to play” screens and introductions you have already seen.
Ad frequency counters (for example how many interstitial ads were shown today) and the date you first opened the app, used to limit ads.
Downloaded puzzle packs — a cache of the public puzzle files.
This data is not linked to your identity. It is not synced through iCloud and is permanently removed when you delete the app.
4. Information processed by service providers
We use a small number of third-party services. Each receives only what it needs to provide its service.
4.1 Puzzle downloads — GitHub Pages
New puzzles are public, static files hosted on GitHub Pages (GitHub, Inc.). When the app downloads them, GitHub necessarily receives the technical data of any web request, such as your IP address, the time of the request and basic device/network information. The app sends no identifier or personal data with these requests. See the GitHub General Privacy Statement.
4.2 Advertising — Google AdMob
Lettra is free and supported by ads served by Google AdMob (Google LLC / Google Ireland Ltd.).
Ad formats: a small banner at the bottom of the home, game, archive and statistics screens (never in Settings); occasional interstitial ads after you finish a puzzle (limited per day and none on the day you install the app); and optional rewarded ads you choose to watch, for example to get an extra hint, repair a streak or open an archived puzzle.
Data Google may process: device and app information (device model, operating system version, app version, language, region, time zone), IP address and approximate location derived from it, ad interactions (impressions, clicks, rewards) and diagnostic data, and — only if you allow tracking — the Apple advertising identifier (IDFA).
Attribution: the app supports Apple’s SKAdNetwork, which lets ad networks measure ad performance without identifying you.
Consent (EEA, UK, Switzerland): before any ad is requested, Google’s User Messaging Platform (UMP) shows a consent form. If you do not consent to personalized ads, you receive non-personalized ads, which are based on context rather than your profile. You can change your choice at any time under Settings → Ad privacy choices in the app.
US state privacy laws: where applicable, the consent platform also lets you opt out of the “sale” or “sharing” of personal information for targeted advertising.
4.3 Usage statistics — Google Analytics for Firebase
We use Google Analytics for Firebase to understand, in aggregate, how the puzzles are played so we can make them better (for example which games are started and finished, and where players get stuck).
Events collected: game screen opened (game, puzzle language, puzzle number, whether it was not started, in progress or finished, and how many days old the puzzle is); puzzle started, completed (game, puzzle language, puzzle number, result, hints used, duration) and abandoned; how-to-play opened; Honeycomb rank reached; hints used; rewarded ads completed or not completed, and offers to unlock a feature with an ad viewed; full-screen ads shown; share button tapped (image or story format); daily completion of every game, streak milestones and lost streaks; archive opened or unlocked; streak repaired; puzzle-language, reminder, sound and haptics changes; app-language settings opened; the result of the tracking permission request; the app opened from a reminder notification; screens viewed; and content download errors.
User properties: the selected puzzle language and the app interface language.
Automatically collected by Firebase: a pseudonymous app-instance identifier, app version, device model, operating system version, language, country (derived from IP; Google Analytics does not store the IP address itself), first-open time and session information.
What is not collected: no names, contact details or words you type; analytics data is not linked to your identity.
Consent mode: analytics storage is off by default and is turned on only after the consent step (where consent is required, only if you agree). Firebase advertising features (ad storage, ad user data, ad personalization) are always off; analytics data is not used for advertising.
4.4 Remote settings — Firebase Remote Config
The app periodically downloads settings from Firebase Remote Config, for example which games are enabled, ad frequency limits or where puzzles are hosted. To do so, Firebase uses a pseudonymous installation identifier and basic device information. No personal data is sent.
4.5 Crash and error reports — Firebase Crashlytics
If the app crashes or a significant error occurs, Firebase Crashlytics collects a report so we can find and fix the problem. A report contains the stack trace, device state (model, OS version, free memory and disk space, orientation), a pseudonymous installation identifier, a short log of the most recent in-app events listed in 4.3, non-fatal errors (for example a failed puzzle download or save) and the puzzle language. Reports are used only for fixing errors. See Privacy and security in Firebase.
4.6 Notifications
The optional daily reminder and streak reminder are local notifications scheduled on your device. No push-notification server is used and nothing is sent to us. You can turn them off in the app or in iOS Settings.
4.7 Sharing your result
When you tap Share, the app creates a result image or text on your device and opens the iOS share sheet. It contains no answers and no personal data. What you share, and with whom, is your choice; the receiving app processes it under its own policy.
5. Tracking and the advertising identifier (IDFA)
The IDFA is used only if you grant permission through Apple’s App Tracking Transparency prompt, which the app shows after you finish your first puzzle. If you do not allow tracking, ads are still shown but without the IDFA, and the app works fully. You can change this at any time in iOS Settings → Privacy & Security → Tracking. We do not track you across other companies’ apps or websites ourselves.
6. Legal bases for processing (GDPR / UK GDPR)
Consent (Art. 6(1)(a)): personalized advertising, use of the IDFA, and analytics storage where consent is required. You can withdraw consent at any time; this does not affect processing before withdrawal.
Legitimate interests (Art. 6(1)(f)): non-personalized ads that fund the free app, crash and error reporting, remote settings and the secure, reliable delivery of puzzles. We have balanced these interests against your rights; you may object at any time (see section 11).
Contract (Art. 6(1)(b)): providing the puzzles you use.
For users in Turkey, processing is based on the corresponding grounds of Article 5 of the Personal Data Protection Law No. 6698 (KVKK), and explicit consent where required.
7. International data transfers
Our service providers (Google, GitHub, Apple) may process data in the United States and other countries outside your own. Where data from the EEA, UK or Switzerland is transferred, it is protected by the European Commission’s Standard Contractual Clauses and, where applicable, the providers’ certification under the EU–US Data Privacy Framework and its UK and Swiss extensions.
User-level event data is kept for the retention period set in our Google Analytics settings (at most 14 months); aggregated reports may be kept longer.
Crash reports (Crashlytics)
90 days.
Remote Config / installation identifiers
Until the app is deleted or the identifier is inactive, per Firebase’s policies.
Advertising data (AdMob)
According to Google’s retention policies.
Web request logs (GitHub Pages)
According to GitHub’s retention policies.
Emails you send us
As long as needed to answer your request, then deleted.
9. Security
All network connections made by the app use HTTPS. The app contains no Lettra login or account that could be compromised, and on-device data is protected by iOS data protection. No method of transmission or storage is completely secure, but we limit the data processed to what is necessary.
10. Children
Lettra is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13 (or under the higher age required in some countries, such as 16 in parts of the EU). If you believe a child has provided personal data, contact dev.ergeakova@gmail.com and we will help remove it.
11. Your rights and choices
Depending on where you live, you may have the following rights. Because we hold no account data and the analytics and crash data are pseudonymous, we may need your help to identify the relevant records (for example the time and device involved).
EEA, UK and Switzerland (GDPR / UK GDPR / FADP): access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, withdrawal of consent, and the right to lodge a complaint with your data protection authority.
Turkey (KVKK, Art. 11): to learn whether your data is processed, request information, learn the purpose, know the third parties it is shared with, request correction or deletion, object to results of automated analysis, claim compensation, and apply to the Personal Data Protection Board (KVKK).
California and other US states (CCPA/CPRA and similar): to know, access, correct and delete personal information, and to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. We do not sell personal information for money. You will not be discriminated against for exercising these rights.
Brazil (LGPD): confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing, and withdrawal of consent.
How to exercise your choices:
Change ad consent: Settings → Ad privacy choices in the app (shown where consent is required).
Anything else: email dev.ergeakova@gmail.com. We will respond within 30 days (or the period required by your local law).
12. Do Not Track
The app does not respond to browser “Do Not Track” signals because it is not a browser; your tracking choice on iOS is controlled through App Tracking Transparency (section 5).
13. Changes to this policy
We may update this policy when the app or the law changes. The current version is always available at this address, with its effective date at the top. If a change materially affects how your data is processed, we will also mention it in the app’s release notes.