Privacy Policy

The short version

Lattice's core puzzle play works offline and needs no account. Network access is used for server verification, optional leaderboards, ads, purchases, and live configuration. Your puzzle progress stays on your device. Free mobile versions may show ads served by Google AdMob. Lattice Complete — where offered as a one-time purchase — removes ads in that app version, and verified Complete users generate no ad requests there. We run no other analytics SDKs.

Ads on the free version

The free mobile versions of Lattice may show contextual banners on non-gameplay screens, an occasional between-board interstitial after a new-player grace period and frequency limits, and optional rewarded ads. Rewarded ads may be offered in exchange for a hint or another clearly described in-game benefit. These ads are provided by Google AdMob (Google Ireland Ltd. / Google LLC), acting as our advertising partner and data processor. To serve and measure ads, the Google Mobile Ads SDK and Google User Messaging Platform may collect and share with Google: your device's advertising identifier (IDFA on Apple platforms or the Android advertising ID, where available) and similar device identifiers; advertising and product-interaction data (for example, that an ad was shown, viewed, or tapped); coarse location inferred from your IP address; device and OS information; crash, performance, and other diagnostic data related to ad delivery; and your privacy-message choices. This data is used to deliver ads, cap frequency, measure performance, manage consent, and detect fraud. We do not sell your data, and Lattice itself does not build a profile of you. Google's use of data is described in Google's Privacy Policy (policies.google.com/privacy) and policies.google.com/technologies/partner-sites.

Live mobile configuration

The Android app uses Firebase Remote Config and Firebase Installations to retrieve operational settings such as ad-frequency limits without requiring an app update. Google may process a Firebase installation identifier, app and package identifiers, platform and operating-system information, language, country/region, time zone, and basic connection metadata to provide and secure this service. We do not use this identifier to create a Lattice account or an individual gameplay profile, and the app does not include Firebase Analytics. If live configuration is unavailable, the app uses conservative settings bundled with the release.

Android purchase verification

When Google Play reports a Lattice purchase, the Android app sends the opaque Google Play purchase token to api.latticegame.com. Our Cloudflare Worker uses that token with the Google Play Developer API to verify the product and purchase state and to acknowledge a completed purchase. We do not send an account, advertising ID, device ID, installation ID, session ID, puzzle activity, or payment-card details with this request.

The raw purchase token is used for the verification call and is not stored in our database. We retain a SHA-256 fingerprint of the token, the allowlisted Lattice product identifier, active/pending/cancelled and acknowledgement state, whether Google marked it as a test purchase, the verification source, and verification timestamps. We do not store the Google order ID, purchase region, or raw token. This limited ledger supports restore, acknowledgement, refund/revocation handling, duplicate-notification protection, fraud prevention, and support for the one-time entitlement. Cloudflare processes ordinary request metadata for delivery and security, but we do not copy the request IP address into the purchase ledger.

Website & browser game (latticegame.com / play.latticegame.com)

This section covers our website (latticegame.com) and browser game (play.latticegame.com), which are separate from the iOS and Android apps described above. The web properties do not currently display third-party advertising and do not offer a web checkout. Our published ads.txt file reserves and authenticates advertising inventory; it does not mean that ads are active.

On-device data. The browser game stores puzzle progress, settings, streaks, and personal bests in local storage and IndexedDB on your device. It uses a first-party language-preference cookie (lat_i18n) so your chosen language can be restored. The marketing site does not set a preference or advertising cookie.

Hosting, security, and aggregate measurement. Cloudflare hosts and protects both sites and processes ordinary request data, such as IP address, browser information, requested URL, time, and security signals, to deliver content and prevent abuse. We use Cloudflare Web Analytics for aggregate traffic and performance measurement. Cloudflare Web Analytics is designed to operate without cookies or persistent cross-site identifiers; we use its reports to understand page traffic, referrers, browser/device categories, countries, and performance, not to build individual profiles.

First-party product events. To learn whether the web experience is useful, the sites send a small set of first-party events — for example, that the welcome flow was completed, Quick Play or a puzzle was started, a hint was used, or a store link was selected. These events contain the page path, language, coarse campaign labels present in the current URL, and the relevant puzzle category or placement. They do not contain an account, name, email, advertising ID, user/device/session/install identifier, puzzle entries, or a raw referrer. The events are accepted at api.latticegame.com and written only as aggregate dimensions and counters in Cloudflare Analytics Engine. Cloudflare still processes ordinary request data for delivery and security, as described above, but we do not copy the request IP address or other request metadata into our product-event records.

Future web advertising. Before any non-essential advertising or measurement technology is activated, we will update this notice and present the required consent controls, including a Google-certified consent message where required. A separate web purchase or cross-platform entitlement does not exist today; any future offer will show its price, platform scope, and terms before purchase.

Lattice Complete = no ads, no ad requests

Where a mobile version offers the one-time Lattice Complete unlock, a purchase verified by that app's store removes ads in that version and stops future ad requests. Store entitlements are platform-specific: an App Store purchase does not transfer to Google Play, or vice versa. On iOS, if Complete is already verified when the app launches, the Google Mobile Ads SDK is not initialized. The Google framework may remain bundled in the app binary, and a purchase made during a running free session cannot undo data already processed before that purchase.

Your ad choices and consent

App Tracking Transparency. Before access to the IDFA, iOS asks your permission through Apple's ATT prompt. If you decline, Google says its Mobile Ads SDK does not send the IDFA in ad requests; you may still see limited or non-personalized ads. You can change the system permission in Settings → Privacy & Security → Tracking.

Apple SKAdNetwork. We use Apple's privacy-preserving SKAdNetwork to measure campaigns without sharing your identity with us.

Android ad controls. Android lets you manage personalized-ad settings and reset or delete the advertising ID through the device's Google ads controls. The exact path depends on your Android version.

Regional privacy messages. Where required, including the EEA, UK, Switzerland, and applicable U.S. states, we use Google's User Messaging Platform before requesting ads. It lets you make the choices required for your region. When Google requires an in-app privacy-options entry point, Lattice shows Manage ad privacy in Settings so you can revisit those choices.

What leaves your device for gameplay

Opt-in leaderboard. If you choose "Post to today's board" in Endless, we send your chosen display name, the day's seed, and your move list to our server, which recomputes your score and stores name + score for up to 14 days — not linked to your identity (no accounts, emails, or device identifiers).

Daily verification. Solved daily boards may be verified against our server; the request contains only the puzzle and your placements — no identifiers.

What we don't collect

Outside of the optional leaderboard name, the aggregate website events, the limited Android purchase-verification ledger, the advertising data, and the live-configuration data described above, we don't collect your name, email, precise location, contacts, or photos, and we run no third-party analytics SDKs. App purchases are processed by Apple or Google Play for the version distributed by that store; we do not receive your full payment-card details. Verified Lattice Complete users generate no ad requests in the app version where the purchase is verified.

Children

Lattice is a general-audience game, not a "Made for Kids" app and not directed to children. Free mobile versions may show ads through Google AdMob as described above, and we do not knowingly collect personal information from children beyond the limited advertising data described here. Where offered, the one-time Lattice Complete purchase removes ads in that app version.

Data retention & your rights

Leaderboard name + score are deleted after 14 days. Android real-time purchase-notification delivery receipts are deleted after 90 days; inactive purchase-token fingerprints are deleted after 24 months. Active one-time-entitlement records are retained while needed to operate, restore, defend, or support that purchase. Advertising and live-configuration data handled by Google is retained per Google's policies. You can use the advertising and privacy controls provided by iOS or Android to limit ad personalization and manage the platform advertising identifier. For questions or requests, email us below.

Changes

If we change how Lattice handles data, we'll update this page and its effective date.

Contact

Questions about your privacy? Email [email protected].