Privacy policy

Summary

Who we are

Lexicon Rogue (Android package com.littlefathom.lexicon_rogue) is developed and published by Little Fathom (“we”, “us”). This policy explains what information is collected when you play Lexicon Rogue, why, who receives it and the choices you have. For the purposes of data protection law, we are the controller of the information described here, and Google acts as our service provider (processor) or, for some advertising purposes, as an independent controller.

Information we collect

We don’t collect your name, email address, phone number, contacts, photos, files or precise location, and the game has no account sign-up. There is no chat and no user-generated content.

The game uses these Google services, which collect information directly from your device:

Each is described below. All of them send data over encrypted (TLS) connections.

Information stored on your device

So you can pick up where you left off, the game saves the following in its private storage on your device:

• game progress: any run in progress, Quills, unlocked Glyphs, Bags and Stakes, the Codex, achievements, statistics such as runs played and your longest word, Daily Run results and your streak;
• settings, such as sound, haptics, reduced motion and large tiles, and your reminder choices;
• whether you’ve bought Remove Ads or made any purchase, and small counters that limit how often ads and rating requests appear.

This information is not sent to us. It is copied to Google’s servers only if you use Play Games cloud save (see Google Play Games Services).

Advertising (Google AdMob)

Lexicon Rogue is free to play and shows ads through the Google Mobile Ads SDK (Google AdMob): optional rewarded ads that you choose to watch (for example for a shop reroll, a revive, a free Ink or double Quills) and occasional interstitial ads between runs. Interstitial ads are never shown to players who have made any purchase.

To show, measure and improve ads and to prevent fraud, Google may collect and process:

• your device’s advertising ID and app set ID;
• your IP address, which can be used to estimate your general location (such as country or city);
• device and app information, such as device model, operating system and app version;
• ad interactions, such as which ads were shown, watched or tapped, plus diagnostic and performance data.

Depending on your consent choices and where you live, ads may be personalised (based on your interests) or non-personalised (based on more limited data such as general location and the app you’re using). Google’s use of this information is governed by the Google Privacy Policy; see also How Google uses information from sites or apps that use our services and How Google uses advertising.

Your consent choices

The game uses Google’s User Messaging Platform (UMP) to ask for your choices before ads are requested. Where the law requires it, including in the European Economic Area, the UK and Switzerland (GDPR) and in US states with privacy laws, you’ll see Google’s message the first time you open the game: you can consent to personalised ads, decline, or opt out of the “sale” or “sharing” of your information for advertising.

You can change your choice at any time from Settings → Privacy options in the game. (This option appears where your region’s privacy rules make it available.) You can also reset or delete your advertising ID, or turn off ad personalisation, in your Android settings (usually Settings → Privacy → Ads or Settings → Google → Ads).

Analytics, crash reports and remote settings (Firebase)

We use three Firebase services from Google:

• Firebase Analytics records app interactions, such as runs started and finished, blinds played, words played (length, score and whether they were valid), shop visits and purchases, ad offers watched, tutorial steps and share taps, along with an app instance ID, device and app information and an approximate location derived from your IP address. Where available it may also use your device’s advertising ID. We see this as aggregated statistics; it is not used to identify you.
• Firebase Crashlytics sends a crash report when the game crashes or hits a serious error: the error and stack trace, device model, operating system and app version, and a Crashlytics installation ID. Crash reporting is switched on in release builds only.
• Firebase Remote Config fetches tuning values (such as how often interstitial ads may appear) so we can adjust the game without an update. It uses a Firebase installation ID to deliver them.

See Privacy and Security in Firebase and the Google Privacy Policy.

Google Play Games Services

Signing in to Google Play Games is optional; the game plays fully without it. If you are signed in (Play Games may sign you in automatically), the game uses it for:

• Leaderboards and achievements: your scores and unlocked achievements are submitted to Play Games and shown with your Play Games profile name and avatar, according to your Play Games visibility settings.
• Saved Games cloud backup: a copy of your game progress (the on-device data listed above) is stored in your Play Games account so you can restore it on another device.

This data is tied to your Play Games account and handled by Google under the Google Privacy Policy. We don’t receive your email address.

In-app purchases (Google Play Billing)

Optional purchases (Remove Ads and Quill bundles) are processed by Google Play Billing. We never receive your payment card or billing details. The game receives a purchase confirmation from Google Play so it can deliver your item, restore purchases and stop interstitial ads, and records that on your device. There are no paid random items. Google’s handling of payments is described in the Google Privacy Policy and the Google Payments Privacy Notice.

App updates and ratings

The game checks Google Play for newer versions (Google Play In-App Updates) and may occasionally ask you to rate it (Google Play In-App Review); both are handled by Google Play, and we don’t see your rating details through the game.

Small fixes may also be delivered over the air by Shorebird, our code-update provider. To find the right update, the game sends Shorebird technical information only: the app’s release and patch version, the device platform and processor type, and a random install identifier generated by the updater. See the Shorebird privacy policy.

Notifications

The game can remind you when the Daily Run is ready or when your streak is about to end. These are local notifications, scheduled on your device; no push service or push identifier is used. Reminders are opt-in: the game asks in context (for example after your first Daily Run) before showing Android’s permission prompt, and you can turn them off in the game’s settings or in Android’s notification settings at any time.

Device permissions

The game requests only these Android permissions:

• INTERNET and ACCESS_NETWORK_STATE: ads, Firebase, Play Games and updates, and knowing when you’re offline;
• VIBRATE: haptic feedback (you can turn it off in Settings);
• POST_NOTIFICATIONS: Daily Run and streak reminders, only if you allow them;
• RECEIVE_BOOT_COMPLETED: so scheduled reminders survive a restart of your phone.

Google’s SDKs also add com.google.android.gms.permission.AD_ID (the advertising ID) and com.android.vending.BILLING (Google Play purchases). The game does not access your location, contacts, camera, microphone, photos or files.

If you share a result card, Android’s share sheet sends the text you chose to the app you pick; it isn’t sent to us.

How information is shared

Information is shared only with the Google services above (Google LLC and its affiliates) and with Shorebird for updates, so they can provide their services to us. Google may also use advertising data as an independent controller as described in its policies. We may disclose information if required by law.

We do not sell your personal information for money, and we don’t share it with data brokers.

Children

Lexicon Rogue is not directed at children. Its target audience is people aged 13 and over, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information through the game, please contact us and we will help remove it.

Data retention and deletion

• On your device: kept until you erase it. Use Settings → Reset progress in the game to erase your progress, or clear the app’s data or uninstall the game to remove everything it stored.
• Play Games: leaderboard entries, achievements and your cloud save are kept in your Play Games account until you delete them, which you can do from the Play Games settings or your Google Account.
• Firebase and AdMob: retained by Google according to its policies and our retention settings (for example, Crashlytics keeps crash reports for up to 90 days). See How Google retains data.

To ask us to delete analytics or crash data linked to your device, email info@littlefathom.com. Because we don’t know who you are, we may need help identifying the data (for example the date you played and your device model).

Your rights (EEA, UK and Switzerland)

If you are in the EEA, the UK or Switzerland, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time (without affecting processing before you withdrew). We rely on your consent for personalised advertising, and on our legitimate interests in running, securing and improving the game for analytics, crash reporting, remote settings, non-personalised ads and fraud prevention. Purchases and cloud save are processed to perform our contract with you.

To exercise your rights, email info@littlefathom.com; we’ll reply within one month. You can change ad consent yourself in Settings → Privacy options. You may also complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

Your rights (US states)

If you live in a US state with a consumer privacy law (such as California under the CCPA/CPRA, Virginia, Colorado, Connecticut or Utah), you have the right to know what personal information is collected, to access and delete it, to correct it, and to opt out of its “sale”, “sharing” for cross-context behavioural advertising, or use for targeted advertising. We will not discriminate against you for using these rights.

We don’t sell personal information for money. Personalised ads from Google AdMob may count as “sharing” or targeted advertising under some of these laws; you can opt out through Google’s message or Settings → Privacy options, or by turning off ad personalisation in your Android settings. Categories involved: identifiers (advertising ID, app instance and installation IDs), internet or other network activity (app interactions, ad interactions), approximate location from IP address, and purchase history. To make any other request, email info@littlefathom.com; you may use an authorised agent.

Security

Game data on your device is kept in the app’s private storage, which Android keeps separate from other apps. All data sent by the game and Google’s services is encrypted in transit (TLS).

International transfers

Google and Shorebird may process information in countries other than yours, including the United States. Google relies on safeguards such as the EU Standard Contractual Clauses and the EU–US Data Privacy Framework, as described in its privacy policy.

Changes to this policy

We may update this policy, for example when the game adds a feature or a service. We’ll change the date at the top, and for significant changes we’ll tell players in the game or on this page before they take effect.

Contact us

Questions about this policy, or a privacy request? Contact Little Fathom at info@littlefathom.com.

← Back to Lexicon Rogue