Privacy policy

Last updated 1 November 2026

This explains what Letternerd collects when you play, what we do with it, who else sees it, and how you can remove it. It covers letternerd.com and the apps that use the same service.

What we collect

Your account and profile

Opening Letternerd does not create an account. The first time you play, or save anything else, we create a guest account with a random ID and a generated username. If you add an email address and password, we keep the address and a hashed password. If you sign in with Google, we keep the Google account identifier and the email address Google shares. Your profile has a display name, an optional @username and a picture or chosen face.

Past age confirmations

Letternerd no longer has 18+ games and no longer asks your age for them. If you confirmed you were 18 or older before 30 October 2026, we still hold the date and time you did, not your date of birth, until we delete these records. Nothing uses them.

What you play and make

Rooms you host or join, your answers, votes and scores, results, Gold, XP and achievements. Games you create and publish, and ratings and reviews you leave. Friends, circles and what you post in them, reactions, blocks and the reports you send.

Buying AI credits

If you buy a pack of AI credits, the payment is taken by RevenueCat’s checkout, which uses Stripe to process cards. Your card details go to them and we never see your card number. RevenueCat is given your account ID, and your email address if you have added one, so it can send a receipt and tell us the purchase went through. We keep a record of each purchase: the pack, the time and whether the credits were added.

Brand games and giveaways

A brand that Letternerd has approved can run its own game or giveaway on Letternerd. Playing one counts as playing here: we record that you opened it, started it and finished it, your score, the approximate place your connection comes from, and, for a giveaway, an entry, and whether you won and claimed a prize. The brand sees this for each player of its campaign: your Letternerd username (or a short guest code if you played without an account), the country you played from, how many times you played and finished, and your best score, along with totals and trends for the campaign. It does not see your email address, name or phone number unless you choose to share them in the game, as described next.

Details you give a brand.A brand’s game can ask, inside the game (or, in a campaign with no game, on its page), for your name, email address or phone number, and can ask survey questions. A details form always has its own box, which starts unticked, next to the wording you are agreeing to (who will have the details and what for). You can skip it, or leave the box unticked, and you still finish the game and get your result; whatever you typed is then thrown away and not kept. If you tick the box, we store your details, sealed, together with the exact wording and its version, and the brand can see them, download them as a spreadsheet and receive them in its own systems. From that point the brand decides how to look after them and is responsible for what it does with them, under the wording you agreed to; Letternerd is not the brand’s agent in that. Brands never see how you play across Letternerd, your results in other games, or any profile of your tastes, and a brand is never told whether you came from the web or from inside Lagos Life.

Your answers to a brand’s survey questions are counted for the brand as totals. A brand sees your own answers next to your name only if you also ticked the box above.

Photos and videos you send to a brand.A brand’s campaign can ask you to send a photo or a video. Sending one needs a box you tick yourself, beside the wording you are agreeing to (what the brand may do with it). We keep the file and that wording with it. Only the brand’s own team can see what you sent, and they can approve or reject it; it is not shown to other players. Letternerd does not check these files automatically, so send only what you are happy for the brand’s team to see, and nothing that shows other people without their agreement. You can take a submission back at any time from the campaign page, which deletes the file; if you delete your account, your submissions are deleted too. Once a brand has used something under the wording you agreed to, it is the brand’s to answer for.

Taking them back. Open My prizes to see which brands have your details and what you agreed to. Withdraw my detailsempties our copy at once, removes you from the brand’s list and downloads, and sends the brand a message that you withdrew, so it can delete what it already holds. Deleting your account does the same for every brand. We cannot make a brand erase a copy it has already taken, but it has promised in its wording to honour a withdrawal, and you can email us if it does not.

Prizes. To claim a prize a brand will ship, you give your name, phone number and address; they go to the brand to deliver the prize and are kept sealed until you claim. A prize code is shown only to the winner. You need an account to claim, so the brand can reach you.

Pictures, audio, video and drawings

When a game asks for one and you submit it, we store it privately and share it with that room through time-limited links. It is checked by an automated moderation service before the room sees it. Your profile picture is public: anyone with its address can load it.

Revision and circles

When you review flash cards, the rating you give each card and the day it is due next are stored against your account, and only you see them. Your review streak is shown to friends only if you turn that on.

Duels

When you finish a game you can turn it into a duel. We keep the game, the questions you were dealt, your score and a short code. Anyone you give the code to can play the same questions once; they see who challenged them and the game, but not your score until they have finished. When they finish, both scores are shown to both of you and the two of you become friends, unless one of you has blocked the other. A duel that is not taken expires. Nobody else can see a duel or its code from your profile.

AI features

Some features send text to AI language models: recaps, building a game from a description, a document or a link, and optional play memories and learning feedback. AI players in a room follow fixed rules and do not use a language model, so nothing is sent for them. Play memories use what your circle has played to suggest better games; they are on by default and you can turn them off, view them and erase them in Settings under Privacy & safety.

Notifications

If you turn on browser notifications, your browser gives us a push subscription address so we can send reminders and turn alerts. You choose which kinds in Settings and can turn them off at any time.

Technical data

Our servers log requests, including IP address, browser and device type, and the pages and actions used, to keep the service running, to limit abuse and to investigate problems. Your browser stores your session and a few preferences in local storage so you stay signed in. We use Google Analytics, which sets cookies and sends your IP address, browser and the pages you view to Google so we can see how many people use Letternerd and which pages they reach. The Meta Pixel sets advertising cookies, described below.

When you are signed in, we also keep the approximate place your connection comes from (the city, region and country that your IP address points to) with your account, and update it as you move. It lets us understand where our players are and show you things that are relevant to where you are. It is not GPS, we never ask your device for your position, and it is never shown to other players. Deleting your account deletes it.

We use the Meta Pixel and Meta’s Conversions API to measure and improve our ads on Facebook and Instagram. When you open a page, view a game, search, register, start a checkout, buy credits or send us feedback, we tell Meta which of these happened, the page address (with room codes taken out), what you searched for, which game or pack it was and what you paid. With it, from your browser and from our servers, Meta receives your IP address, browser, Meta’s cookies, and the city, region, postcode and country your connection comes from; and, if you are signed in, your player ID, email address and display name, which we hash (turn into a code that cannot be read back) before they leave. Meta uses this to match these events to Meta accounts. This happens inside Lagos Life too. Browsers that send Global Privacy Control are not tracked by Meta, and you can manage how Meta uses this for ads in your Facebook or Instagram ad settings.

We also use PostHog for product analytics and error reports. It records which pages are opened and when a room is created, joined, started and finished, and when something breaks, so we can see where people get stuck. These events are tied to your random player ID, not your name or email address, and never include your answers, prompts, messages or what you typed; room codes are taken out of page addresses before they are sent. PostHog also works out your approximate location (city, region and country) from your IP address and keeps it with your player ID; it does not use GPS or ask your device for your position. PostHog keeps an identifier in your browser (a cookie or local storage) and does not track browsers that send Do Not Track. If we turn on session replays, they show taps and layout only: all text and inputs are hidden, and photos, video and audio are not recorded. Prompts and replies to our AI features are not sent to PostHog; only counts, timing and errors are.

We also use Falorb for product analytics. Its script loads from a.falorb.com on every page, including inside Lagos Life, which sends Falorb your IP address, your browser and the pages you open.

Public circles

Joining a public circle asks you to confirm you are 13 or older, and we keep when you did. Once you join, other members can see your username and a drawn face, that you are a member, what you write in its chat, and your place on its weekly board. How many people are online is shown only as a number, and you can leave yourself out in Settings. We don’t tell other players who is in a circle unless they have joined it too, and joining doesn’t add anyone to your friends or show them when you are around. We keep messages until you delete your account, or until they are removed. Anyone in the circle can report a message; we keep who reported it, and why, for moderation. A message that our filter refuses is not stored, and we record only the kind of refusal.

How we use it

• To run the games, scores, leaderboards, friends and circles you ask for.
• To sign you in, and to send the codes you request for email changes, password resets and deleting an account.
• To keep people safe: checking media, reading reports, blocking abuse and enforcing the community rules.
• To suggest games and write recaps and feedback, when those features are on.
• To secure the service, fix faults and understand whether it is working.

Who else sees it

Other players. People in a room see your display name, avatar and what a round makes public. Published games show their maker and ratings. Leaderboards and creator pages are visible to others.

Service providers. We use these to run Letternerd, and they process data only for that:

• Cloudflare: hosting, delivery, storage of media and profile pictures, and request logs.
• A database server we operate: your account and game data.
• Resend: sending sign-in and confirmation emails.
• DeepSeek: the language model that answers our AI features (recaps, game building and feedback).
• Google: sign-in with Google, Gemini models when DeepSeek cannot answer an AI feature, and Google Analytics for site usage statistics.
• PostHog: product analytics and error reports, as described above.
• Falorb: product analytics, as described above.
• Meta: measuring and improving our ads, as described above.
• Brands: only what you ticked a box to share with a brand, or the delivery details you gave to claim its prize, as described under brand games and giveaways. A brand is separately responsible for those details.
• RevenueCat and Stripe: taking payment for AI credit packs. We never see your card number; it goes to Stripe through RevenueCat’s checkout.
• OpenAI: media moderation and speech-to-text for room audio and voice practice.
• Unsplash and Pexels: short search phrases to find a stock cover picture for a generated game.
• Your browser’s push service (Google, Apple, Mozilla or similar): delivering notifications you opted in to.

When the law requires it, or to protect people from serious harm, we may disclose information to the authorities. We do not sell personal information. We share it for advertising only with Meta, as described above.

How long we keep it

We keep your account data while your account exists. Details you gave a brand are kept until you withdraw them or delete your account, or the brand’s campaign is removed, and are then emptied from our systems. Delivery details for a prize are kept sealed until the brand has delivered it. Finished rooms are kept as a record so that scores, results and leaderboards stay correct for everyone who played. Server logs are kept for a limited period for security and debugging.

Deleting your account

Open Settings, scroll to Delete account, and confirm. If you have an email on the account we send a 6-digit code to it; a guest confirms by typing a word. Deleting is permanent.

When you delete your account we remove:

• Your sign-in details, sessions and email codes.
• Your notification and push settings and subscriptions, and your inbox.
• Your friendships, follows, blocks and circles you owned (ownership passes to the longest-standing member where there is one).
• Your duels, whether you made them, took them or were sent them, with the questions and scores kept for them.
• Your learning data, settings, saved games and play memories.
• The details you gave to brands, and a notice to each brand that you withdrew them. Your survey answers stay in the brand’s totals, no longer linked to you.
• Private and unlisted games you made, which are archived out of sight.

What stays:

• Your profile row, emptied: your name becomes “Deleted player” and your username and picture are removed.
• What you wrote in a finished room stays in that room’s record for the others who played, shown as “Deleted player”.
• Games you published to everyone remain playable, with no owner shown.
• Your Gold and XP ledger, kept for audit.

You can also remove things without deleting the account: erase play memories, remove your profile picture, leave a circle or block a player.

Your choices and rights

Most controls are in Settings: your name and username, notifications, play memories, learning feedback, who can invite you, blocked players and the reports you sent. Depending on where you live, such as the EU, the UK or California, you may have the right to access, correct, delete, restrict or export your personal data, and to object to some processing. To use a right, or to ask a question about your data, email hello@letternerd.com. We may need to confirm it is your account first.

Children

Letternerd is for people 13 and older. We do not knowingly collect personal information from anyone under 13. If you think a child has made an account, email us and we will delete it.

Where your data is processed

Letternerd runs on Cloudflare’s global network and on servers we operate, and our providers work internationally, so your information may be processed outside the country you live in. We rely on those providers’ contractual and technical safeguards.

Security

Passwords are hashed, media is private and served through time-limited links, and access to account data is limited to what each part of the service needs. No service is perfectly secure, so please use a password you do not use elsewhere.

Changes to this policy

When we change this policy we update the date at the top, and for material changes we tell you in the app before they take effect.

Contact

Questions or requests: hello@letternerd.com. See also the terms of service and the community rules.