This policy explains how TheAIFALabs may collect, use and protect personal data when you visit this website, contact us, subscribe to updates or purchase a product through a third-party platform.
1. Data we collect
We may collect information you provide directly, including your name, email address, subject, message and newsletter preference. Technical information may include IP address, browser type, device information, pages visited and cookie identifiers when analytics or security tools are enabled.
Letter Rush game data
Letter Rush can be played as a guest without an email address. It keeps your chosen nickname, active puzzle, guesses, results, elapsed time and preferences in this browser. When you start an online guest session, Supabase creates an anonymous account and stores a private copy of that game data. Account session information is also kept in browser storage so your progress can resume.
Your game saves, personal statistics and best-round history are private to your account. You can separately join the public Today and All-time leaderboards by choosing a public nickname. Joining makes that nickname, your total points, completed round count, wins and rank visible to everyone. Google profile names, email addresses, private answers and guess histories are not included in public leaderboard responses. New eligible rounds started after joining can contribute; previous private history is not automatically published.
Today uses Dubai time (UTC+4) and resets at midnight. A round counts on the day Supabase first receives its completed score, including delayed offline submissions. Choosing “Hide me from the leaderboard” removes your profile and totals from public view and cancels unfinished public rounds. It retains your private saves and previously published score records; rejoining restores those totals. Public rankings are for casual play and are not cheat-proof.
Signing out of a guest account or clearing browser storage can remove your access to its cloud save and leaderboard profile unless you linked Google first. This does not automatically delete the cloud record. The current game does not run an automatic guest-data deletion schedule.
If Google sign-in is enabled, it uses basic Google identity information, including your email address and profile name, to connect your saved progress across devices. It does not request access to Gmail messages, contacts or Drive files. When an anti-abuse challenge is configured, Cloudflare Turnstile processes the challenge response. These services also process connection and security information needed to operate authentication.
You can download your game progress from Account. For game-data access or deletion requests, contact jhi@theaifalabs.com. Do not send account tokens, passwords or progress backups containing answers by email. See the providers' information: Supabase, Google and Cloudflare.
2. Why we use data
We use data to respond to enquiries, provide requested services, deliver communications you choose to receive, maintain site security, understand site performance and meet legal obligations. Where GDPR applies, processing may rely on consent, contract, legitimate interests or legal obligation.
Website preferences and enquiry drafts
The home page stores your Simple view or 3D preference in this browser under aifalabs-view. You can change it using the view control or clear it through browser site-data settings. The preference is not submitted by the website. The catalogue category is kept in the URL, so copied links can include that selection.
The contact form prepares a draft locally. Prepare email passes it to your email application; Copy message writes it to your clipboard only when you choose that action. This form does not send enquiries to a website server. Your email provider processes a message when you send it. Do not place sensitive information in URL subject fields.
3. Cookies
Essential cookies may support security and basic site operation. Analytics or marketing cookies should be activated only after appropriate consent where required. You can manage cookies through the consent controls, when implemented, and your browser settings.
4. Third-party services
Purchases are completed through Gumroad, which processes checkout and delivery under its own privacy terms. Hosting, analytics, email delivery or form-processing providers may process limited data on our behalf once connected. We do not claim control over third-party websites linked from this site.
5. Sharing and international transfers
We do not sell personal data. We may share it with service providers acting under appropriate instructions, professional advisers or authorities where legally required. If data is transferred internationally, appropriate safeguards should be used where required by law.
6. Retention and security
We retain personal data only as long as reasonably necessary for the purpose collected, legal compliance and dispute resolution. Reasonable technical and organisational safeguards should be applied, although no online system can be guaranteed completely secure.
7. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing; request portability; withdraw consent; and complain to a supervisory authority. Withdrawal does not affect earlier lawful processing.
8. Children
Some products support school learners. Purchases and account-related communications should be completed by a parent, guardian or other authorised adult where required. The website should not knowingly collect unnecessary personal data from children.
9. Contact
Send privacy requests to jhi@theaifalabs.com. Identity verification may be requested before fulfilling a rights request.
10. Changes
This policy may be updated when services, providers or legal requirements change. The review date above should be updated when material changes are published.