Privacy Policy

I Call On Letter ("the Game", "we", "us") is a real-time multiplayer word game operated by Indie Collective. This Privacy Policy explains what we collect when you play on the web or in our mobile apps, how we use it, and the choices you have.

You can play without an account. An account is optional and only needed to host games and keep your game history.

If you play without an account:

• —Display name. The name you enter when you join or create a game.
• —Game session. A signed cookie on the web, or a session token in the mobile app, that identifies you as a player in that one game. It holds a random ID, not personal details.
• —Answers. The words you submit during a round.

If you sign in with Google or Apple:

• —Your name and email address from your Google or Apple account. If you use Apple's Hide My Email, we store the private relay address Apple gives us instead of your real email.
• —Your Google profile picture URL, when Google provides one.
• —Your Google or Apple account identifier, so we can recognise you when you sign in again.
• —For Apple only, a refresh token. We use it only to revoke our access to your Apple account when you delete your account.
• —A sign-in session token that keeps you signed in. It is a cookie on the web and is kept in secure storage on your device in the mobile app. We store only a hash of it on our servers.

Automatically, PostHog records how the app and website are used, such as pages viewed, taps and clicks, game events, device and browser details, and errors. If you are signed in, your analytics are linked to your account ID and name. Our servers and hosting providers may also log technical data such as IP address and request details.

We use the information above to:

• —Run the game in real time and identify you within a game
• —Sign you in, let you host games, and show your history and share cards
• —Check answers during scoring
• —Detect and prevent abuse or cheating
• —Understand how the Game is used and fix errors

We do not sell your information, we do not show ads, and we do not track you across other companies' apps or websites. The iOS app does not use Apple's advertising identifier.

While a game is running, its state lives in a temporary store and expires about 24 hours after the game was last updated.

When a game ends, we save a record of it to our database: the game code, its settings, the players' in-game names, their answers, scores and final standings. We use this for game history and share cards. If you were signed in, the game is linked to your account.

Answers may also be added in aggregate to an answer bank that helps validate future answers. The bank keeps each answer with the letter and category and how often it has been seen. It does not record who wrote an answer.

We use these service providers. Each has its own privacy policy.

• —Railway hosts our servers, database, Redis store and the realtime messaging service that delivers game events between players.
• —PostHog provides product analytics and error tracking on the website and in the mobile apps.
• —DiceBear (api.dicebear.com) generates in-game avatars from a random player ID. Your name and email are not sent to it.
• —TypeSafe and OpenAI check whether answers are valid. Answers that pass the first-letter check are sent to them with the letter and category. We do not send account details.
• —Google and Apple provide sign-in if you choose to use them.
• —Google Fonts serves the website's fonts, so Google receives your IP address when the site loads. The mobile apps do not use it.

The website stores a game session cookie while you play, a sign-in cookie if you sign in, a short-lived cookie (about 10 minutes) while you complete Google or Apple sign-in, and an analytics identifier from PostHog in a cookie or in local storage. The mobile apps keep your sign-in token and game session token in secure storage on your device, and PostHog keeps an analytics identifier on the device.

• —Live game state expires about 24 hours after the game was last updated.
• —Your account and game history are kept until you delete your account. A sign-in session expires 60 days after you last use it, or sooner if you sign out.
• —Records of completed games are kept in our database. When you delete your account, your account ID is removed from them.
• —Analytics data is kept according to PostHog's retention settings.

To delete your account, open the app or icallon.gg, go to Profile, and choose Delete account. Deletion is immediate and permanent.

When you delete your account we remove your account, your sign-in sessions and the link between you and your past games, and we remove your account ID from completed games. If you signed in with Apple, we revoke our access to your Apple account. Completed games stay in other players' history, under the in-game name you used.

Deleting your account does not automatically delete analytics data held in PostHog. To have it removed, email us and we will handle your request.

If you can't sign in, ask us to delete your account by emailing us from the email address on the account: [email protected]

The Game is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

You can delete your account yourself, as described above. For anything else, including a copy of the data we hold about you or a correction, email us and we will respond within 30 days.

We process your information to provide the service you ask for, and, for analytics and abuse prevention, on the basis of our legitimate interests in running and protecting the Game.

PostHog processes analytics data in the United States, so that data is transferred outside the UK.

You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. Continued use of the Game after changes are posted constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Email us at [email protected]