Privacy policy

Last updated October 18, 2026

Letterbugs is a word game. It doesn't ask for your name, your email address, your contacts, or your location, and it has no ads and no tracking. This page lists everything the app sends to our servers, why, and how to delete it.

What the app stores on our servers

• Your handle. The 5 to 8 letters and digits you pick. It's public: it shows on the leaderboards next to your scores, with your streak on the Daily and Hexed boards. Tapping a name there opens that player's card, which shows their hat, campaign level, longest word, streaks, hats, and Hexed hoods.
• A device key. The app makes a key pair on your phone and keeps the private half in the Keychain. We store the public half and use it to check that requests really come from your device. It isn't linked to your Apple Account.
• An App Attest key. Apple's App Attest service confirms the app is genuine. We store the key it certifies and a counter, to stop forged score posts.
• Scores. For the Daily: the date, your score, which board it was, and when you posted it. For the campaign: your best score on each level. For Hexed: the day, when you started and finished, your score, and whether you cleared it. To check a score, the server replays the moves of your round. The moves are then discarded, not stored.
• Your profile. The hats you've unlocked and wear, your launcher colors, your campaign progress, your streaks, and your Hexed hoods.
• Game Center link, if you're signed in to Game Center. Your Game Center player ID for Letterbugs, so a new phone can get your handle back. We don't receive your Game Center name or anything about your Apple Account.
• Reports you make. If you report a handle as offensive, we store the handle, the time, and your device key, so one device reports a name only once. Reports aren't shown to anyone.

What's sent but not stored

• Your IP address, which every internet connection has. We use it for a moment, in memory, to stop floods of requests. We don't write it down. Our host, Fly.io, handles connections under its own privacy policy.
• The app's version and rules, so we can tell an out-of-date app to update before it posts a score.

What stays on your phone

Your settings, a copy of your progress, scores waiting to be sent while you're offline, and the daily reminder. The reminder is a notification your phone schedules itself. We don't send push notifications.

Apple services

If you're signed in to Game Center, the app reports your scores and earned hats to Apple's Game Center, under Apple's privacy policy. App Attest and Game Center sign-in are Apple services too.

Who handles the data

Our servers run on Fly.io in the United States, and the database is on Neon. This website is served by Cloudflare, which may count visits with Cloudflare Web Analytics. That uses no cookies and doesn't follow you across sites. We don't sell or share your data with anyone else.

Deleting your data

In the app, open Settings › Delete account. It deletes your handle, profile, scores, Hexed results, App Attest key, Game Center link, and your reports and the reports about you, right away. Deleted data can stay in our database provider's backups for a short time until they roll over. If you can't use the app, email us and we'll do it for you.

If you email us, we keep the email to answer you. Ask, and we'll delete it.

Children

Letterbugs is for all ages. It doesn't ask anyone for contact details, and handles are checked against a list of offensive words. If you're a parent and want your child's data deleted, use Delete account or email us.

Changes

If this policy changes, we'll update this page and the date at the top.

Contact

Questions about privacy: [email protected]