Privacy Policy

Letterland ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect when you use letterland.lucieg.me, how we use it, and your rights regarding that data.

1. Data We Collect

Account Information

When you register, we collect:

• Username — your chosen display name, visible to other players.
• Email address — used for account management. Not visible to other players.
• Password — stored as a secure cryptographic hash. We never store your plain-text password.
• Account creation date and optional bio.

Game Data

We store data generated by your use of the platform, including:

• Match history (games played, results, scores, timestamps).
• In-game activity (words submitted, moves made).
• Leaderboard statistics derived from your game history.

Social Data

• Friend connections (who you have added as a friend).
• Friend requests (sent and received).
• Notifications (in-app alerts about game events and friend activity).

Technical Data

• Session tokens (stored in your browser's local storage for authentication).
• Basic connection information used by our WebSocket service to deliver real-time features.

What We Do Not Collect

• We do not collect payment information (the Service is free).
• We do not use third-party advertising trackers.
• We do not sell your data to third parties.

2. How We Use Your Data

• To create and manage your account.
• To operate the game platform and deliver real-time gameplay.
• To display leaderboards and player profiles.
• To facilitate the friends and messaging system.
• To send in-app notifications about game events.
• To detect and prevent abuse, cheating, or violations of our Terms.
• To improve the platform and fix bugs.

3. Data Storage and Security

Your data is stored on a secured server. We use industry-standard measures to protect it, including encrypted connections (HTTPS/TLS) and hashed password storage. However, no system is completely secure, and we cannot guarantee absolute security.

Session tokens are stored locally in your browser and are used only to authenticate you with our servers.

4. Data Sharing

We do not sell or rent your personal data. We may share data only in these limited cases:

• Public profile data — your username, bio, and game statistics are visible to other logged-in users on your profile page.
• Legal requirements — if required to do so by law or in response to a valid legal request.
• Hosting infrastructure — our hosting provider processes data on our behalf to operate the server. They are not permitted to use your data for their own purposes.

5. Data Retention

We retain your account and game data for as long as your account is active. If you request account deletion, we will delete your personal data within a reasonable timeframe. Some anonymised statistical data (e.g. aggregated leaderboard history) may be retained after deletion.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (you can update your username and bio in your profile).
• Delete your account and associated personal data.
• Object to how we process your data in certain circumstances.

To exercise any of these rights, please contact us (see Section 8).

7. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with their data, please contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page when we do. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through the platform or at the contact details available on the site.