Who we are
Leven is a daily word-ladder puzzle operated by AppLoc LLC ("we", "us"). This policy covers the Leven website at https://www.playleven.com and the game played there. You can reach us at [contact email - set CONTACT_EMAIL in src/data/siteConfig.ts].
Information stored on your device
Leven saves the following in your browser's local storage so the game works the next time you open it. It stays on your device and is not sent to us, except as described in the next section.
- Your progress on the current puzzle, and your results and history for past puzzles.
- Small preferences, such as whether you have already seen the introduction.
- Copies of recent daily puzzles, so the game loads quickly and works offline.
- The friend challenges you have created or opened.
- A random player ID, generated on your device, and an anonymous sign-in token used only for friend challenges.
The site also keeps an offline copy of its own files (a "service worker" cache). That contains the game itself, not information about you.
Information sent to our servers
Daily puzzles
The game downloads each day's puzzle from our servers. Like any web request, this reveals your IP address and browser type to the servers that handle it. We don't use it to identify you.
Friend challenges
When you create, open or finish a friend challenge, the game signs in anonymously and sends:
- an anonymous user ID created by the sign-in service, and your random player ID;
- the challenge's words and rules, if you created it;
- the words you played, your step count, and when you started and finished.
Anyone with the challenge's code can see its results, including the paths other players took and how many steps they used. Results are not shown with a name, email address or anything else that says who you are.
Service providers
We use a small number of companies to run Leven. They process data on our behalf:
- Cloudflare hosts the website. Its servers receive standard request information, such as IP address and browser type, and may keep it briefly in logs for security and reliability.
- Google Firebase (Authentication, Cloud Firestore and Cloud Functions) stores the daily puzzles and friend challenges and provides the anonymous sign-in.
Cookies
Leven doesn't set cookies, and doesn't use analytics or advertising trackers. It uses your browser's local storage only for the game data described above.
How information is shared
We don't sell or rent personal information, and we don't share it for cross-context behavioral advertising. We share information only with the service providers listed here, when the law requires it, or to protect Leven and its players from fraud or abuse.
How long we keep it
Data on your device stays until you clear it (see Your choices). Friend challenges can be played for 24 hours after they're created. We keep challenge records and results only as long as we need them to run the feature, prevent abuse and fix problems, and we delete them when you ask.
Your choices and rights
- Clear your data on this device from the Support page, or by clearing this site's data in your browser settings.
- Ask us to access or delete friend-challenge data by emailing [contact email - set CONTACT_EMAIL in src/data/siteConfig.ts] with the player ID shown on the Support page. Because we don't know who you are, that ID is how we find your records.
Depending on where you live, including the EU, the UK and states such as California, you may have the right to access, correct, delete or move your personal information, to object to or restrict how it's used, and to complain to your local data-protection authority. We won't treat you differently for using these rights.
Children
Leven is a general-audience game. It is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.
Where data is processed
We are based in the United States, and our service providers may process data in the United States and other countries. Where the law requires it, these transfers rely on appropriate safeguards, such as the providers' standard contractual clauses.
Security
The site is served only over HTTPS. Our servers re-check every result they receive, and friend-challenge records can be written only by our server code. No system is perfectly secure, but we keep what we collect small to limit any risk.
Changes to this policy
If we change this policy, we will post the new version here and update the date at the top of this page.
Contact
Questions or requests about privacy: [contact email - set CONTACT_EMAIL in src/data/siteConfig.ts].