DAILY SLEUTH

Privacy Policy

Last updated: May 14, 2026

Daily Sleuth ("the App," "we," or "us") is operated by LFH Labs. This Privacy Policy describes the information we collect, how we use and share it, and the choices you have. It applies to the Daily Sleuth mobile app, the website at dailysleuth.app, and our backend services.

Information We Collect

Automatically collected

  • Anonymous device identifier. A random ID generated on your device the first time you open the App. It lets us tie your game progress, push notification preferences, and analytics events together without knowing who you are.
  • Gameplay analytics. Events such as case viewed, case started, clue requested, accusation submitted, case solved, and session start/end. Each event includes the event name, a timestamp, your device ID, and a small set of event-specific properties (for example, case number, difficulty, number of stars earned).
  • Technical metadata. When our servers receive requests, they record the IP address and user-agent string of the request. We use these for rate-limiting, spam prevention, and debugging.
  • Game progress. Cases you have played, your rank/stars/clues for each case, streaks, and freeze-day usage. Stored locally on your device and synced to our servers so that progress survives reinstalls.

Provided by you

  • Email address. Only if you opt in to our mailing list or create an account. Used to send case-related updates, weekly recaps, and account-related messages.
  • Account credentials. If you create an account, we store your email and a salted hash of your password — never the password itself. If you sign in with Apple or Google, we store the provider's opaque user ID rather than a password.
  • Display name. Optional. Shown on the public leaderboard alongside your scores if you choose to participate.
  • Push notification token + preferences. If you enable notifications, your device's push token, preferred notification time, and time zone offset are stored so we can deliver the daily case reminder at the right local time.

Purchases

In-app purchases and subscriptions are processed by Apple (on iOS) or Google (on Android) and managed through RevenueCat. We do not see or store your payment card details. We do receive a record of your active entitlements so we can unlock paid features in the App.

How We Use Information

  • To deliver the daily case and other core features of the App.
  • To save your progress and sync it across reinstalls or devices.
  • To send push notifications you have asked to receive.
  • To send emails you have subscribed to (and only those).
  • To analyze gameplay in aggregate so we can improve case design, difficulty curves, and the overall experience.
  • To detect abuse, prevent fraud, enforce our Terms of Service, and comply with legal obligations.

We do not sell your personal information. We do not use your data for behavioral advertising. We do not share your data with advertising networks.

Service Providers

We rely on a small number of vendors to operate the App. They process data on our behalf:

  • Apple and Google — billing for in-app purchases, push notification delivery, sign-in.
  • RevenueCat — subscription state management.
  • Mailgun — transactional and newsletter email delivery.
  • Cloudflare — content delivery and DDoS protection for our website and API.
  • MongoDB Atlas — database hosting for your account, progress, and analytics records.

Data Retention

We retain account, progress, and leaderboard data for as long as your account remains active. Analytics events are retained for up to 24 months. Email subscriber records are retained until you unsubscribe, after which we keep a minimal suppression entry so we do not contact you again. You can request deletion of your data at any time — see "Your Rights" below.

Your Rights and Choices

  • Push notifications. You can disable them at any time from the App's Settings screen or from your device's system settings.
  • Email. Every email contains an unsubscribe link, or you can email us at the address below.
  • Analytics. You can request that we stop collecting analytics tied to your device ID by emailing us.
  • Access or deletion. You can request a copy of the personal data we hold about you, or ask us to delete it, by emailing [email protected]. We will respond within 30 days.
  • Leaderboard. If you play without signing in, your scores appear under a default display name (e.g., "Detective") and cannot be traced back to you. If you would like your leaderboard entries removed, email us at [email protected].

Children's Privacy

Daily Sleuth is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

Security

We use HTTPS for all traffic between your device and our servers, store passwords only as salted hashes, and limit access to production data to authorized personnel. No system is perfectly secure; we encourage you to use a strong, unique password if you create an account.

International Users

The App and its servers are operated from the United States. If you use the App from outside the United States, you understand that your information will be processed in the United States, which may have different data-protection rules than your country.

Changes to This Policy

We may update this policy from time to time. Material changes will be announced in the App or by email to subscribers. The "Last updated" date at the top of this page reflects the most recent revision.

Contact

Questions, requests, or concerns about this policy? Contact us at [email protected].