Privacy

Larkwit privacy notice

Last updated: October 21, 2026

Larkwit is a puzzle game run by Pescao Labs LLC, a Wyoming (USA) limited liability company ("we", "us"). This notice explains what information the game uses, why, and the choices you have. We've tried to keep it short and plain.

Contact: [email protected]. For privacy questions or requests, write to our Privacy Officer at that address.

The short version

You don't need an account. We never ask for your name.
The game gives your browser a random ID. It isn't linked to your name.
We use that ID to count visits and finished puzzles, so we can make the game better and see which links bring players. We don't sell your information or use it for targeted advertising.
If your browser sends Do Not Track or Global Privacy Control, usage stats are not sent. The game has no separate off switch. A copy of the events stays on this device until you delete it.
If you type an email, it stays on this device. Reminder emails are not being sent, and the address is not passed to an email provider.
We don't use cookies.

What we collect, and where it is kept

1. On your device

The game remembers you with your browser's local storage. Those entries include:

the random ID, the date you first played, the last day you played, and how you first found the game (the campaign tags in the link, the referring site's name, and the page you landed on)
your settings, your streak, which daily puzzles you finished, and progress on a puzzle you haven't finished
the last 1,000 usage events, which you can download
practice-puzzle progress, and where you were in the short warm-up
whether you closed the in-app-browser note or the add-to-home-screen tip
if you type an email: the address, the time you agreed, which list you joined (a daily reminder, or a note when a Supporter plan exists), and a personal link meant for that reminder
if a word puzzle is offered to you, that puzzle's progress and results, kept apart from the logic-grid streak

Settings → "Delete all my data on this device" erases the game's own saved entries. It does not delete usage stats already sent, and it does not clear codes the analytics tool stores under its own keys.

2. Usage stats

When the build includes a PostHog project key, events are sent to PostHog unless your browser sends Do Not Track or Global Privacy Control. The same events are also kept on this device, including when those signals are on. The events are:

your first visit, and coming back on a later day
starting or finishing a puzzle, with the time taken, hints, undos and mistakes
using a hint, and finishing or skipping the warm-up
starting or finishing a practice puzzle (practice is not part of the daily streak)
sharing a result: only how you shared (your phone's share sheet, copy, or cancel), not who with and not the message
opening how to play, taps on the welcome and warm-up buttons, and changes in Settings
the extra-hint screen. It is a labelled stand-in. No advertising network is loaded, and nothing is charged
opening the "Go ad-free" screen. The Supporter plan is not for sale, and nothing there charges you
asking for a reminder or a Supporter note: that you asked, and which screen, never the email address
the in-app-browser note, the add-to-home-screen note, copying your personal link, and whether a personal link was used to keep the same random ID
if a word puzzle is offered, each submitted guess as the result and that group's difficulty only. The words themselves are not recorded

Each event carries:

the random ID, the date you first played, and how many days since then
how you found us: the campaign tags in the link you followed (for example utm_source=meta, the campaign name and the ad name), or the name of the website that sent you (for example google.com), and the page you first landed on. We remove click identifiers such as fbclid and gclid
a short code for this visit, and the game version
whether the page is open in the Facebook, Instagram or Messenger app, as a home-screen shortcut, or in a normal browser, and whether this ID was adopted from a personal link
a flag when the browser looks automated, and a flag on our own test devices, so those visits can be left out of the numbers

PostHog also receives technical details your browser shares with it: browser and version, operating system and version, device type and model, screen and window size, language, time zone and its offset, and PostHog's own device and session codes. We remove the raw user-agent string before an event is sent. We don't record your screen, we don't capture every tap automatically, and we don't run surveys.

These events don't include your name, email address, phone number, precise location or keystrokes.

3. Your IP address

Your device's internet (IP) address is seen by any website you visit. Cloudflare, which hosts the site, sees it, and PostHog sees it when usage stats are sent. The game tells PostHog not to work out your city or country from that address. The PostHog project is set to discard IP addresses rather than keep them with your events. Cloudflare keeps short-term technical and security logs under its own policy.

4. Links that keep the same random ID

Some links contain a code made from your random ID, the date you first played, the last day you played, how you found us, and the page you first opened. The code lets our counts treat the next visit as the same player. It does not copy your solved puzzles onto another device.

You will see that kind of link in three places:

inside the Facebook, Instagram or Messenger app, so "open in your browser" can keep the same ID (the code expires after 3 days)
Settings → "Copy my personal link" (30 days)
a reminder link saved on this device if you type an email (40 days). It is not emailed, because reminder emails are not being sent

The code has no name or email in it. Anyone who opens it on a browser that doesn't already have its own ID can be counted as you, so please don't share it. The "Share my result" button never includes this code. That link only says the visit came from a shared result.

5. Email, only if you type one

After you solve a puzzle, you can open "Email me a daily reminder". The "Go ad-free" screen can ask for one note when a Supporter plan exists. Both are optional, and the consent box starts unticked.

If you submit an address, it is saved on this device with the time you agreed and which list you joined. It is not sent to us, and we don't pass it to an email provider. The screen says reminder emails haven't started. The usage-stats event records that you asked, not the address.

Why we use it (and our legal basis)

Run the game and remember your progress on your device. On-device data. Providing the service you asked for, and storage that's strictly necessary for it.

Understand how the game is used so we can improve it (which puzzles are too hard, whether people come back, which links bring players). Usage stats and the random ID. Our legitimate interest in improving the game. You can object by turning on Do Not Track or Global Privacy Control, which stops stats from being sent, or by emailing us to delete stats already sent.

Keep the service secure and working. The IP address while you are connected, and short technical logs. Legitimate interest in security.

In the UK, storage on your device for statistics can be used to improve a service when you are told about it and can object. That is what this page and the browser signals above are for. The game does not use the stats for advertising or to build a profile of who you are.

Who we share it with

We don't sell your personal information, and we don't share it for targeted (cross-context behavioural) advertising. Service providers process data only on our instructions:

PostHog, Inc. (USA): usage analytics, when a project key is in the build and your browser is not sending Do Not Track or Global Privacy Control. The host is in the United States.
Cloudflare, Inc. (USA): website hosting and security.

We don't use an email provider. We don't load an advertising network or a Meta Pixel, and we don't send your information to Meta.

We may disclose information if the law requires it, or to protect our rights or the safety of others. If Pescao Labs LLC is ever reorganised or sold, the game's data may transfer to the new owner, and this notice will still apply to it.

Facebook and Instagram: if you open Larkwit from an ad in the Facebook or Instagram app, the page opens inside that app's own browser, which Meta controls under Meta's privacy policy. We don't control that browser.

International transfers

We're based in the United States, and our providers process data there. When personal data is transferred from the UK or the European Economic Area, we rely on our providers' data-processing agreements, which include the UK/EU-approved Standard Contractual Clauses (and, where a provider is certified, the EU-US Data Privacy Framework and its UK extension).

How long we keep it

On your device: until you delete it in Settings or clear your browser data. The on-device event log keeps the latest 1,000 events, then drops the oldest.
Usage stats held by PostHog: up to 12 months, then deleted. That period is PostHog's retention setting. The game does not delete those events on a timer of its own.
Technical and security logs (hosting): short periods set by Cloudflare.
Email address: on this device only, until you delete the game's data or clear the browser. We don't hold a copy.

Your choices and rights

Stop usage stats being sent: turn on Do Not Track or Global Privacy Control in your browser. We honour both. There is no "share usage stats" switch in Settings.
Delete what's on this device: Settings → "Delete all my data on this device".
See what was recorded on this device: Settings → "Download my event log".
Access, correct or delete data we hold, or object to its use: email [email protected] and include the ID shown in Settings → Your data. That is the first characters of the random ID, and it is how we can find the usage stats, because we don't know who you are. We'll reply within one month (sooner where the law requires). We won't treat you differently for using your rights.
UK and EU: you also have the right to restrict processing and to data portability. You can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority. We'd appreciate the chance to help first.
Canada: you can contact our Privacy Officer at [email protected], and you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
US states: depending on where you live, you may have the right to know, delete or correct personal information, and to opt out of its sale, sharing or targeted advertising. We don't sell or share it, and we don't use it for targeted advertising. To make a request, email us as above.

Children

Larkwit is a general-audience game. It isn't directed to children under 13, and we don't knowingly collect personal information from them. We don't ask your age. Please don't type an email address if you are under 16 (under 13 in the US). If you think a child has given us personal information, email [email protected] with the ID shown in Settings, and we'll delete it.

Security

We keep collection to a minimum. We don't collect names, passwords or payment details through the game, we use encrypted (HTTPS) connections, and we limit who can see the data. No system is perfectly secure, so please keep your personal link to yourself.

Changes to this notice

If we change how we use information, we'll update this page and the date at the top. If we add advertising partners, payments, or a service that actually sends email, we'll update this notice before turning them on.

Contact

Pescao Labs LLC, Privacy Officer: [email protected]