Privacy Policy

1. No account, no sign-up

Lingo Surfer does not require an account or sign-up. Progress, settings and scores are stored on your device.

2. Saves: iCloud (iPhone) and Android backup

iPhone: if you are signed in to iCloud, progress and coins sync through Apple's iCloud key-value storage. We cannot see this data.

Android: the game does not use iCloud. If backup is turned on for your device, Android may include your game save in your own Google account backup (encrypted with your screen lock), so it comes back when you reinstall. We cannot read that backup.

3. Global leaderboard (optional)

The game only sends data to the global leaderboard after you choose and save a nickname yourself, in Profile or Settings. Until then, a placeholder name such as "Surfer1234" is shown on your device only and is never sent. Once you have saved a nickname, the game sends these after each run to our leaderboard database, hosted on Supabase:

• the nickname (3–16 characters, checked against a word filter)
• your score, best combo and number of correct answers
• a random identifier made by the app

This identifier is not a hardware or advertising ID. Like any internet request, our host briefly receives your device's IP address; we do not use it to locate you. To stop sending, clear your nickname in Settings.

4. City downloads

Some cities (for example London, Paris, Berlin and Mexico City) are downloaded the first time you choose them. The files come from our storage on Supabase. The request contains only the file name; like any internet request, the host briefly receives your IP address. Nothing about you is sent.

5. Ads

The game only shows optional rewarded ads, which you watch to get energy or to continue a run. They are served by Google AdMob and limited to content suitable for all ages. In the EEA and UK, Google's consent form is shown first.

iPhone: iOS asks for App Tracking Transparency permission first. If you allow it, Google may use your device's advertising identifier (IDFA) for personalised ads. If you don't, Google does not use the IDFA.

Android: there is no tracking prompt. Google's ad SDK may use your device's advertising ID. You can reset or delete it at any time in your device's Settings (Privacy > Ads, or Google > Ads on some devices); ads then continue without it.

On both platforms Google's ad SDK also collects some data on its own, for ads, measurement and fraud prevention: approximate location (from your IP address), device and app identifiers, ad interactions, and technical diagnostics such as crash and performance data.

6. Purchases

The "Unlimited" subscription is weekly or yearly. The yearly plan has a 7-day free trial. Purchases are managed with RevenueCat using an anonymous app user ID plus your purchase history. We never see payment details.

iPhone: Apple processes the purchase through In-App Purchase. The subscription renews automatically until you cancel it in your Apple ID subscription settings. Refunds are handled by Apple.

Android: Google Play processes the purchase. The subscription renews automatically until you cancel it in Google Play > Payments & subscriptions. Refunds are handled by Google.

7. Anonymous usage analytics

To learn which parts of the game work and where players get stuck, the app sends a small number of anonymous usage events to PostHog, an analytics service hosted in the EU (Frankfurt). Examples: which screen was opened, a run started or ended and how long it lasted, how many answers were right or wrong, the subscription screen was opened, a purchase succeeded or was cancelled. Each event carries a random identifier that the app makes for analytics only. It is not your nickname, the leaderboard identifier, a hardware ID or the advertising ID. Events also include the app version, the device platform, model and OS version, simple performance numbers (start-up time, frame rate, a moment when the game briefly froze), anonymous error reports that name only the place in the game's code where the error happened (never an error text or anything you typed), and the app's language and level settings. We do not send your name, email or nickname, and PostHog is set to discard your IP address. In the EEA and UK, analytics only runs if you accept in Google's consent form (see §5). You can turn it off at any time in Settings › About › "Share anonymous usage data"; this also deletes events that have not been sent yet. We do not add any crash-reporting SDK of our own, and we do not sell data.

8. Notifications and Live Activities

Optional reminders (for example "your energy is full", and a trial reminder 2 days before a trial ends) are scheduled on your device. No push server is used. On iPhone there is also an energy countdown Live Activity. You can turn reminders off in your device's notification settings.

9. Children

Lingo Surfer is not directed at children under 13, and we do not knowingly collect their data. Ads in the game are limited to content suitable for all ages. Parents can manage purchases through Screen Time on iPhone or Family Link on Android.

10. How long we keep data, deletion and your rights (GDPR/KVKK)

• Data on your device (progress, settings, coins): kept until you delete the app. Deleting the app removes it. iCloud data can be removed in iOS Settings; Android backups in your Google account settings.
• Leaderboard entries (nickname, scores, random identifier): kept while the leaderboard runs, until you ask us to delete them.
• Analytics events: kept for up to 12 months, then deleted.
• Purchase records at RevenueCat: kept as long as needed for your subscription and legal accounting duties.

To delete your leaderboard entries or analytics data, or for any other privacy request (access, correction, objection), email samilaltun1997@gmail.com with your nickname. We reply within 30 days.

11. Changes and contact

We may update this policy; the date at the top shows the latest version. For questions or privacy requests, contact samilaltun1997@gmail.com.