Privacy policy

Who we are

Latchwork is a solo dice puzzle for Android and iPhone made by Vladimir Strycek, an individual developer publishing as PortosLabs (“we”). We are responsible for the information described here. Latchwork is in testing on Android and iPhone; this policy covers the test builds and later releases. The PortosLabs website privacy notice separately covers the portoslabs.com website.

Summary

• Latchwork is free, with no ads, no in-app purchases and no subscriptions.
• There are no accounts: no sign-in, no email, no social login and no cloud save.
• Without the optional leaderboard, nothing leaves your phone.
• If you join the leaderboard, the game sends your chosen display name, a random player ID and your finished runs to our server, so others can see your name, score, rank and replays.
• The app contains no analytics or tracking SDK. We never collect your email, device ID, advertising ID, location or contacts through the app.
• You can delete your online data from the app at any time.

What stays on your phone

Your games, history, streaks, stats, achievements, replays of your runs, chosen styles and settings are stored on your device only. We cannot see, recover or delete them. They stay until you delete the app. Your device's own backup, if enabled, may copy app data under Google's or Apple's terms.

The optional daily reminder is scheduled locally on your phone and asks for notification permission when you turn it on. There is no push-notification server.

The optional leaderboard

Latchwork asks once on first launch whether you want to join the leaderboard, and offers it again in Settings. Nothing is sent until you enter a display name and tap Join. If you join, the game sends:

• Your display name, 3 to 16 characters, chosen by you. Please don't use your real name or anything that identifies you.
• A random player ID and a random secret, generated by the app. The secret stays in your phone's secure storage; our server stores only a SHA-256 hash of it, used to recognise requests from your app.
• Your finished runs: the list of moves, and the board seed for Classic, Classic Large and Relatch. The server computes the score, tiles and turns from them.
• Name reports you make about other players' names.

Which runs are sent: every first Daily attempt, and a Classic, Classic Large or Relatch run only when it beats your previous best. Practice runs are never sent. When you join, your existing best for each mode and today's Daily are sent once.

We use this information only to run the leaderboard, show replays and moderate names. It is not used for advertising and is not sold.

Who can see what

Other players can see your display name, score, rank and the replay (moves) of your submitted runs. Replays of today's Daily only open for players who have already played that Daily.

Players can report a name by long-pressing a leaderboard row. After three reports from different players, the name is shown as “Player” until we review it by hand. Changing your name clears reports about the old name. There is no chat, messaging or blocking.

Where it is stored

The leaderboard server, at api.latchwork.app, runs on Cloudflare Workers with a Cloudflare D1 database. Data is stored by Cloudflare, with the primary database in Europe. Cloudflare's network handles requests worldwide, so requests can be processed in other countries. All connections use HTTPS.

Your IP address is not stored in the leaderboard database. Like any web request, Cloudflare sees the IP address you connect from, and the server uses it as a key to rate-limit the creation of new players.

Logs and backups

Logs. Cloudflare Workers Logs are enabled for the leaderboard server. They contain request details and error messages and are kept for the period set by Cloudflare's plan, currently a few days, then deleted automatically.

Backups. Cloudflare D1 keeps a short point-in-time recovery history of the database, currently up to 7 days on the plan used. After you delete your data, copies can remain in that history until it expires.

Service providers

• Cloudflare hosts the leaderboard server and database on our behalf. Read Cloudflare's privacy policy.
• Google Play and Apple's App Store and TestFlight distribute the app. They process installs, crash and usage data under their own policies: Google's privacy policy and Apple's privacy policy.

We may also disclose information where required by law.

Support email

If you email us, we receive your email address, your message and anything you attach, and use them to answer you. Please don't send passwords, your leaderboard secret or payment details; Latchwork never needs them.

Support messages are kept for as long as needed to resolve the request and handle related follow-up. Records may be retained longer where required by law or needed to establish, exercise or defend a legal claim. You can ask for deletion using the contact address on this page.

Why information is processed

Where the GDPR or similar laws apply: game data on your phone is processed to provide the game. Leaderboard data is processed because you chose to join it, to provide that feature, and for our legitimate interest in keeping the leaderboard fair and free of abusive names. Logs are processed for our legitimate interest in running the server securely and fixing errors. Support email is processed to answer your request.

Retention and deletion

Leaderboard data is kept until you delete it in the app or ask us to delete it. Logs and backups expire on Cloudflare's schedule, as described above.

To delete your online data, open Settings, Leaderboard and choose Delete my online data. If you no longer have the app or the phone, email us. See delete your Latchwork data for the steps and what is removed.

Children

Latchwork is intended for players aged 13 and older. It is not directed at children, and we do not knowingly collect information from children under 13. If you believe a child under 13 has joined the leaderboard, email us so the data can be deleted.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal information and to object to processing. Email us with “Privacy request” in the subject. Because there are no accounts, we may ask for your display name and roughly when you last played to find your data. You may also complain to your data-protection authority.

Contact

Questions about this policy: [email protected].

Changes

If Latchwork's data practices change, for example a new feature or service, we will update this policy and the Google Play and App Store privacy declarations, and change the effective date above.