Crosslatch is a daily word puzzle game. This policy explains what personal data we collect, why we collect it, and what rights you have over it.
Crosslatch is operated from New Zealand. If you have any questions about this policy, contact us at admin@crosslatch.com.
Account information — when you create an account we store your email address and display name. This is necessary to identify your account and keep your results across devices. Lawful basis: contract (you ask us to create an account).
Timezone — we record your browser's timezone string (e.g. Pacific/Auckland) so we can serve you the correct daily puzzle at your local midnight. We do not track your location. Lawful basis: contract.
Puzzle results — for each puzzle you complete we store the date, number of attempts, whether you solved it, and the time taken. This is used to generate your statistics. Lawful basis: contract.
Groups — if you create or join a group, we store the group name, your membership, and the date you joined. Other members of a group you belong to can see your display name and your daily results (attempts, whether you solved, and your time) in that group's shared dashboard. You can leave a group at any time to stop sharing. Lawful basis: contract.
Feedback — if you submit feedback voluntarily, we store the message text and the date. Lawful basis: consent.
Session cookie — we set one strictly-necessary cookie to keep you signed in between visits. This cookie does not track you across other sites and does not require your consent under GDPR/ePrivacy.
We do not use advertising cookies, third-party tracking pixels, or behavioural analytics.
We do not sell your data to any third party.
We keep your account data for as long as your account is active. If you delete your account, all your personal data (profile, timezone, results, and feedback) is permanently deleted within 24 hours. We do not keep backups of deleted accounts beyond our standard 7-day rolling database backup window.
Inactive accounts. If you do not sign in or complete a puzzle for 365 days, we may delete your account and all associated data. This keeps us from holding on to personal data nobody is using.
When any account is deleted, for either reason, we keep a count of how many accounts were deleted that day, and how many games those accounts had completed, grouped into broad bands. These figures contain no names, email addresses, account identifiers or results — they cannot be linked back to you or to anyone else, and there is nothing in them for us to delete on request.
Under GDPR and the New Zealand Privacy Act 2020, you have the right to:
If you are in the EU/EEA and believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.
Crosslatch is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will delete it promptly.
We may update this policy from time to time. Material changes will be noted at the top of this page with a revised date. Continued use of the site after a change constitutes acceptance of the updated policy.
Questions? Email admin@crosslatch.com.
See also: Terms of Service