Lost Vowels Privacy Policy

Signed-in accounts

Apple or Google supplies a stable provider identifier. Lost Vowels does not use email as the account key. We store username, theme preference, and submitted results. Provider identity tokens are verified and not stored.

Usernames and moderation

A public username is optional and is only needed to appear on daily leaderboards. It is checked against a word filter when you choose it, then screened by an automated moderation step that runs on our own servers; your username is not sent to any outside AI provider.

Names that the automated step flags, or that another player reports, are reviewed by a person at Leon Frontier. For each reviewed name we keep the name, the automated assessment, and whether it was approved or blocked. A blocked name is removed from leaderboards.

Reporting and blocking

If you report a username, we store the reported name, the reason you chose, when you reported it, and your account or installation identifier, so the same report cannot be filed twice. The reported player is never told who reported them.

If you block a player, we store a record that your account or installation has blocked theirs. It is used only to hide that player from your leaderboards, and the blocked player is not told. If you sign in after reporting or blocking as a guest, those records move to your account.

Diagnostic logs

The app sends sanitised operational events to diagnose failures and interrupted flows. Tokens, provider assertions, usernames, email addresses, guesses, answers, and raw bodies are redacted. Logs are access-controlled, rate-limited, rotated, and bounded.

Notifications

Signed-in players may opt into a daily reminder. We store an Expo push token, platform, IANA timezone, opt-in state, and delivery outcome. Campaign and delivery identifiers prevent duplicate sends. Disabling reminders or signing out disables the destination.

Advertising

Lost Vowels is supported by Google AdMob. Banners can appear on category selection, during play, and on the daily summary; one interstitial may appear after a completed game; rewarded videos are optional and player-initiated. A Remove Ads subscription hides the banners and the interstitial; rewarded videos stay available.

Google's User Messaging Platform resolves consent before an ad is requested. If you decline, no ad is requested. Privacy choices can be reopened from Settings. Lost Vowels requests non-personalised ads and never asks for cross-app tracking permission.

Google may process IP-derived coarse location, device type, operating system, and ad interactions for delivery, frequency capping, and fraud detection. We do not send username, account ID, game results, streak, or leaderboard position to advertising partners.

Remove Ads subscription

If you subscribe to Remove Ads, the App Store or Google Play processes the payment; we never receive card details. We store the store's subscription identifier, the plan, when it was bought and when it expires, and link it to your installation or account so the server can decide whether ads are shown. Apple and Google tell us about renewals, cancellations, and refunds. The record is kept after account deletion, without your account or installation identifiers, for refunds, fraud prevention, and accounting.

Rewarded verification

A single-use random identifier is sent to Google when you choose a rewarded video. Google's signed completion confirms it to the server. It contains no username or contact information. Expired unverified IDs are deleted; verified records are retained with game-integrity records to prevent replay.

Retention and deletion

Profile → Danger zone removes local guest data or a signed-in account. Account deletion removes username and provider link, session credentials, moderation copies, and push destinations. De-identified history and aggregate outcomes may remain for integrity, fraud prevention, and statistics.

Reports and blocks you made, and reports and blocks about you, are deleted along with your account. Deleting guest data deletes the reports and blocks made from that installation.

Privacy questions

For access, deletion, or other privacy requests, email hello@leonfrontier.com.