Your data

Privacy

Last updated 1 August 2026.

Guest play

Guest sessions use a random installation identifier, app version, platform and timezone. Credentials are stored in the device’s secure storage. Gameplay results are associated with that installation. Using Delete guest data removes the installation and its guest-owned results from the server, then clears the app’s local data.

Signed-in accounts

Apple or Google supplies a stable provider identifier. Lost Vowels does not use email as the account key. We store your username, theme preference and submitted results. Provider identity tokens are verified and are not stored.

Diagnostic logs

The app sends sanitised operational events to help diagnose failures and interrupted flows. Tokens, provider assertions, usernames, email addresses, guesses, answers, and raw request or response bodies are redacted before upload. Logs are access-controlled and rate-limited. Server log files rotate by size and retain only the configured bounded set of backups; the app keeps only a small in-memory diagnostic buffer.

Notifications

Signed-in players may opt in to a daily reminder. We store the device’s Expo push token, platform, IANA timezone, opt-in state, and delivery outcome. Campaign and delivery identifiers prevent duplicate sends. Disabling reminders or signing out disables the destination.

Advertising

Lost Vowels is free and supported by advertising. Ads are served by Google AdMob, which acts as an independent controller of the data it collects. Banners appear on category selection, during play, and on the daily summary; one interstitial may appear after a completed game; rewarded videos are always optional and player-initiated.

Consent comes first. On launch we run Google’s User Messaging Platform, which records your consent choice on the device. No ad is requested until that choice has been resolved, and if you decline, no ad is requested at all. You can reopen the form at any time from Settings → Privacy choices.

We request non-personalised ads only. Lost Vowels never asks for permission to track you across other apps and websites, and does not request an advertising identifier for that purpose. Non-personalised ads are still selected using coarse location derived from your IP address and the context of the app, and Google receives technical data such as IP address, device type, operating system, and ad interaction events in order to deliver ads, cap how often you see them, and detect fraud. See Google’s privacy statement for how Google uses this data.

Rewarded video. When you choose to watch a rewarded ad, we generate a single-use random identifier and pass it to Google. On completion Google sends our server a signed confirmation containing that identifier, which we use only to unlock the in-game reward. It contains no username or contact details. Unverified identifiers expire and are deleted; verified reward records are retained with game-integrity records to prevent replay.

We do not send your username, account identifier, game results, streak, or leaderboard position to any advertising partner.

Retention and deletion

Use Profile → Danger zone to delete local guest data or a signed-in account. Account deletion removes the username and provider link, deletes session credentials, moderation copies, and push destinations. De-identified game history and aggregate delivery outcomes may be retained for integrity, fraud prevention, and aggregate statistics.

Contact

For privacy requests, use the contact route listed on the Support page.