Privacy Policy
Last updated: October 10, 2026
This policy explains what information AlphaLett ("we," "us") collects when you use the game, how we use it, and the choices you have. We've written it to plainly describe what the app actually does — not boilerplate for its own sake.
Information We Collect
Account information. Creating an account requires a username and password. An email address is optional; if you add one, we use it only to send password-reset emails (through our email delivery provider) and never for marketing. You can add, change, or remove it from your profile. Your password is stored as a one-way cryptographic hash — we cannot see or recover your actual password.
Gameplay data. If you're logged in, we store the games you play: category, difficulty, score, date, and whether it was a Daily Challenge. If you create or accept a Challenge, we store both players' scores and the outcome so the result can be shown to both of you.
Contact form. If you write to us through the contact form, we store what you submit (your message, plus your name, email, and company if you provide them, and for logged-in users your account ID) so we can respond and act on it. We also keep a salted, one-way hash of your network address purely to limit spam; it can't be turned back into an IP address.
Automatically collected data (analytics). We use PostHog, a third-party analytics service, to understand how the game is used — things like which pages you visit, which categories and game modes you play, which buttons you click, when you start and finish games, and general device/browser information. If you are logged in (and have consented where required), these events are linked to your AlphaLett account ID — not your email — so we can understand how individual players use the game and, later, personalize it. This helps us fix problems and decide what to improve. See PostHog's own privacy policy for details on how they handle this data. Where the law requires your consent (see "Your Choices and Rights" below), analytics stays off until you click Accept on our consent banner.
Advertising. AlphaLett may show ads served by third-party networks such as Google AdSense. These providers may use cookies and similar technologies to show and measure ads, and to personalize them where permitted. Where consent is required (EEA, UK, California and similar), ads load only after you accept; you can change your choice any time via "Cookie settings" in the footer. You can also manage Google's ad personalization at adssettings.google.com.
Cookies. We use a session cookie to keep you logged in between visits. It's strictly necessary for the account and Challenge features to work and contains no information beyond your account ID. Analytics cookies/storage (PostHog) are optional and only set once analytics is allowed. We also store your consent choice in your browser's local storage. If and when we add advertising (see below), that will introduce additional cookies from our ad partner.
How We Use Information
- To operate your account, save your game history, and calculate streaks
- To run the Challenge feature — matching up scores between two players
- To understand overall usage patterns and improve the game (in aggregate, via analytics)
- To detect and prevent abuse of the game or accounts
We do not sell your information to third parties.
Advertising
We plan to display ads through Google AdSense to help support the game. Google and its partners may use cookies to serve ads based on your visits to this and other websites. You can learn more about how Google uses this data, and opt out of personalized advertising, at Google's Ads Settings page and via the Digital Advertising Alliance.
Affiliate Links
Some categories (such as Brands) may show links to third-party products or services after a game. Some of these may be affiliate links, meaning we could earn a small commission if you make a purchase — at no extra cost to you.
Your Choices and Rights
Analytics consent. If you visit from the European Economic Area, the United Kingdom, California, or a location we can't determine, we ask for your opt-in before turning on analytics. You can change your mind at any time using "Cookie settings" in the site footer. We also treat a Global Privacy Control (GPC) browser signal as a decline.
Access, deletion, and correction. Depending on where you live (for example under the GDPR/UK GDPR or the California Consumer Privacy Act), you may have the right to know what we hold about you, to have it corrected or deleted, and to object to or restrict certain processing. We don't sell your personal information and don't share it for cross-context behavioral advertising. You can delete your account yourself from your profile page, which permanently removes your account, stats, and game history (duels you played with others remain visible to your opponent under an anonymous "[deleted]" name). For other requests, email us at contact@alphalett.com.
Data Retention & Deletion
We keep your account and gameplay data as long as your account is active. To request that your account and associated data be deleted, contact us using the details below — this isn't yet a self-service option in the app.
Children's Privacy
AlphaLett is not directed at children under 13, and we do not knowingly collect information from anyone under 13. If we learn that we've collected information from a child under 13, we'll delete it.
Security
We take reasonable measures to protect your information, including hashing passwords and serving the site over HTTPS. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.
Changes to This Policy
We may update this policy as the game changes — for example, once advertising or new features actually go live. We'll update the date at the top when we do.
Contact
Questions about this policy? Use our contact form or email contact@alphalett.com.