Privacy policy
1. Controller
The controller is Marco José López Vila (marcojlv), developer of LAN: Letters against Numbers ("the game") and owner of lettersagainstnumbers.com ("the website"). Contact for any privacy matter: [email protected].
This policy covers the Android app, the browser version (game.lettersagainstnumbers.com) and the website.
2. What data we handle and why
2.1 Your account
The first time you open the game, a guest account is created with a random identifier, without a name or email. If you choose to link it with Google, we keep your Google email and account identifier so you can recover your game on another device. Google also sends your name and the link to your profile picture; they are stored with the account, but the game neither uses nor shows them. Legal basis: providing the service you ask for (GDPR art. 6.1.b).
2.2 Your game
We keep your progress (letters, levels, slots, in-game currencies, looks, trophies, records and days played) and, for each run, its seed, your actions (taps and upgrades) and its result. The server replays every run with that data to check it is legitimate before giving rewards or showing it on leaderboards. Legal basis: providing the service (art. 6.1.b) and the legitimate interest in preventing cheating (art. 6.1.f).
2.3 Game usage
We record usage events to balance the game: opening it, session start and end, the screens you visit, whether you accept the ads offered and whether you share a run (only the medium: card, GIF or link), together with the game version, the platform (Android or browser), which part of this website you came to the game from if you did (the home page's demo, for instance) and the device's time zone (which also sets when the game's day changes). They include no contact data and nothing from other apps or websites. Legal basis: legitimate interest in improving the game (art. 6.1.f).
2.4 Ads (Android only)
The Android app shows Google AdMob rewarded ads only when you choose to watch one for a reward. Google may use the phone's advertising ID and technical device data to show and measure ads, under its privacy policy. In the European Economic Area and the United Kingdom we ask for your consent with Google's form; without it, ads are not personalized. You can change your choice in the game (Profile → Ad settings). When you finish an ad, Google confirms to us directly that you watched it, together with your game account identifier, so we can give you the reward. Legal basis: your consent for personalized advertising (art. 6.1.a) and providing the service for the reward (art. 6.1.b). The browser version and the website show no ads.
2.5 Leaderboards
Leaderboards show other players your in-game name, your country and your best height. The game generates the name at random and you can change it; don't use your real name if you don't want it seen. Your device suggests the country and you can correct it. Legal basis: providing the service (art. 6.1.b).
2.6 The browser version
In the browser, the game keeps your game, your session and your preferences in your browser's local storage, plus a copy of its own files so it works offline. They are not tracking cookies and they don't leave your device, except your game, which syncs with our server just like in the app. Details in the cookie policy.
2.7 This website
The website has no forms. Like any website, its host receives your IP address and technical data of each visit (browser, page requested) to serve it and protect it from attacks. To know which pages get read we use Cloudflare Web Analytics, which counts visits in aggregate (page, country, device type, referring website) with no cookies, storing nothing on your device and without identifying you or following you across websites. Legal basis: legitimate interest in running the website securely and improving it (art. 6.1.f).
The website keeps your answer to the Google Analytics notice in your browser for 12 months, so it doesn't ask again. It is kept in the browser's local storage (localStorage): it is not a cookie and it doesn't leave your device.
2.8 Google Analytics (only if you accept it)
If you accept it, we also use Google Analytics 4 to measure in more detail how the website is used: pages viewed, where visits come from, device type and approximate country. To tell visits apart, Analytics stores a random identifier in your browser (the _ga and _ga_* cookies): it shows that two visits come from the same browser, but not who you are. Google does not log or store your IP address in Analytics.
Consent: Analytics doesn't load until you accept it in the notice shown when you enter the website (or, where it appears, in Google's consent notice), and you can change your mind any time under "Privacy preferences" at the bottom of every page. If you reject it or don't answer, it stays off (see the cookie policy). Legal basis: consent (art. 6.1.a). Retention: 14 months at most. Google acts as a processor. Neither the game (in the app or in the browser) nor the home page's demo uses Google Analytics.
3. Who we share data with
- Supabase hosts the game's database and server in the European Union (Ireland), as a processor.
- Google: Google sign-in (if you use it), AdMob advertising in the Android app and, if you accept it, Google Analytics on the website, as a processor.
- Cloudflare hosts and serves the website and the browser version, as a processor.
If any of them handles data outside the European Economic Area, it does so with the safeguards the GDPR requires (standard contractual clauses or the EU-U.S. Data Privacy Framework). We do not sell your data or share it with anyone else, unless required by law.
4. How long we keep it
- Your account and your game: as long as your account exists. Guest accounts unused for 30 days with little progress (a record under 150 m) are deleted automatically with all their data; only an anonymous summary of each remains (how far it got, not who it was), to understand why players leave.
- Usage events: 90 days. After that only anonymous daily totals remain, with no player identifier.
- Each run's actions: the detail is deleted once the run ends and the server has checked it (except runs flagged as suspicious, kept for review); the log of each action, after 30 days.
- Google Analytics (only if you accept it on the website): 14 months at most.
You can delete any account, with everything linked to it, in the game (Profile → Delete my account) or by asking us: see Delete your account.
5. Your rights
You can ask for access, rectification, erasure, restriction, portability or object to the processing by writing to [email protected]. Include the account ID shown in the game under Profile. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (AEPD) or your local authority.
6. Children
The game is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.
7. Changes
If we change this policy, we will update the date above and, for important changes, announce it in the game.