Privacy Policy

1. Introduction

This policy explains which personal data the LeTer application processes, why and how, and what your rights are. The data controller is LAMAT, Douala, Cameroon (the "Publisher").

2. Data we collect

The Publisher only collects the data needed for the game to work: your account data, your game data, some technical data and, once payments are enabled, data about operations on your tokens. They are detailed below.

The application does not include any audience measurement, advertising or ad-tracking tool.

3. Account data

• first name, last name, username and phone number, provided when you register, and your email address if you choose to provide it;
• password: never stored in plain text, only a secure hash is recorded;
• creation date, account status and whether your phone number has been verified.

Your username is visible to other players. Your name, email and phone number are never shown to them.

4. Game data

• tables joined, seat taken, games played, cards played, decisions (continue or leave), results and cards played automatically when the turn time runs out;
• messages sent in a game chat, kept with the history of that game;
• the token balance of your game account.

At a table where its creator has enabled anti-collusion detection, and only if you allow it, your device location is sent during the game, in the foreground only (never in the background). It is rounded to about 11 metres, never shown to other players (only distances calculated by the server are displayed) and deleted no later than 24 hours after the game ends. Refusing does not prevent you from playing.

This data may be analysed to spot possible collusion between players. These analyses produce internal indications, never an automatic sanction.

5. Technical data

• sign-in session data: start and expiry dates; the session token is kept on your device in its secure storage, and only its hash is recorded on our servers;
• server technical logs (errors, rejected requests), which never contain your password or session tokens;
• your IP address is read temporarily, in memory, to limit abuse (number of attempts); it is not recorded;
• your preferences (sound, language) stay on your device and are not sent to our servers.

6. Payment data

Once buying or withdrawing tokens through Mobile Money is enabled, the Publisher will record for each operation: its type (purchase or withdrawal), the number of tokens, the amount and currency (FCFA), its status, its dates, the payment method reported by the provider and the operation's references at the provider.

The Publisher does not receive or store your PINs or payment credentials, and does not copy your phone number into payment data. The application only displays a masked version of the number linked to your account.

As of the date of this policy, payments are not enabled yet, so this data is not collected yet. This policy will be updated when payments are enabled.

7. How we use data

• creating and managing your account, authenticating you and securing access;
• organising and refereeing games, showing your username to other players, running the chat;
• keeping your game account and processing operations on your tokens;
• preventing and detecting cheating, fraud and abuse;
• operating, maintaining and securing the Service;
• answering your requests and meeting our legal obligations.

8. Data retention

Account data is kept for as long as your account exists. Locations used for anti-collusion detection are deleted no later than 24 hours after the game ends. Game and payment data may be kept longer where needed to prevent fraud or to meet legal obligations, in particular accounting obligations.

The exact retention periods for each category of data will be specified in a future version of this policy.

9. Security

The Publisher applies appropriate technical and organisational measures: passwords and session tokens stored as hashes, session token kept in your device's secure storage, restricted access, encrypted exchanges with the servers. As no system is infallible, absolute security cannot be guaranteed.

10. Sharing with service providers

Your data is never sold or rented. It may be entrusted to technical providers acting on behalf of the Publisher (for example, hosting of the servers and database), only to the extent needed for their task.

It may also be disclosed where required by law or to defend the Publisher's rights.

11. Payments and external providers

The planned payment provider is CinetPay, which supports Mobile Money payments. Once payments are enabled, they will be processed by CinetPay under its own privacy policy; you will enter your payment details directly with it. Only the data strictly needed for the operation (in particular its amount and reference) will be sent to it.

This section will be completed when payments are enabled, with the exact list of data exchanged.

12. Your rights

Depending on the applicable law, you may request access to your data, its correction or deletion, restrict or object to its processing, or ask for its portability. You can withdraw location access at any time in your device's settings.

To exercise these rights, write to hugueslamat16@gmail.com. You may also contact the competent data protection authority.

13. Deleting your account

The application does not yet offer self-service account deletion. You can request it by writing to hugueslamat16@gmail.com. Some data may be kept for as long as needed to meet legal obligations or to prevent fraud.

14. Cookies and similar technologies

The mobile application does not use advertising cookies or trackers. It only stores on your device what it needs to work: your session token (secure storage) and your sound and language preferences.

15. Minors

The Service is not intended for people under 18. If you believe a minor has sent us data, contact us so that we can delete it.

16. Changes to this policy

This policy may change, in particular when payments or new features are enabled. You will be informed of any significant change in the application.

17. Contact

For any question about your data: LAMAT, Douala, Cameroon, hugueslamat16@gmail.com.

18. Last updated

This policy was last updated on 26 October 2026.

Addendum: the www.leter.cm website

This section supplements the policy above for the www.leter.cm website, published by LAMAT. The website does not ask you to create an account and has no forms.

The website stores in your browser (local storage) only your language choice and, where applicable, your choice about audience measurement. This information is not sent to LeTer.

Audience measurement: the website may use Google Analytics 4, a Google service. It is only loaded after you consent in the banner provided for this purpose; it then sets measurement cookies and sends browsing data to Google (pages viewed, device, browser, approximate location), which may be processed outside Cameroon. You can withdraw your consent at any time with the “Audience measurement” button at the bottom of the page.

The server hosting the website keeps technical logs (IP address, date, page requested, browser), needed for it to run and stay secure.

For any question or to exercise your rights: hugueslamat16@gmail.com.