Privacy Policy

Wooordje stores what it needs to run a flashcard app: your account, the words you study, and how you are getting on with them. There is no advertising, no analytics product, no tracking across other websites, and nothing is sold or shared for marketing. You can export everything you have made, and you can delete your account yourself from Settings.

The controller for the personal data described here is TiaTech, Helfrichstraat 55, 7311 JB Apeldoorn, Netherlands, registered with the Dutch Chamber of Commerce under 87152088 (VAT NL004363587B83). Wooordje is operated from the Netherlands and this policy is written against the GDPR.

For anything in it, or to exercise any of the rights below, write to privacy@wooordje.nl.

• Your account — email address, display name, and a password stored only as a bcrypt hash — we never hold the password itself and cannot recover it.
• Learning settings — your native language, CEFR level, how many new cards you want a day, playback speed, and whether you appear on the leaderboards.
• Study data — which words you have reviewed and how each one is scheduled, your review sessions and how long they lasted, your streak, XP and badges.
• Things you make — decks, cards, examples and notes.
• Deck shares — the email address you type when you share a deck with someone. It is used to deliver that share and nothing else.
• Sign-in with Google — only if you choose it: the identifier Google gives us and the email address on that account. We do not receive or store your Google password, and we do not read anything else from your Google account.
• Security records — an audit log of account- and content-level actions, which includes the IP address the action came from, and short-lived rate-limit counters held in memory for the length of their window.

There is no analytics or advertising SDK anywhere in the application, and no third-party tracking cookie.

• Session cookie — set when you sign in, HTTP-only so scripts on the page cannot read it. It is what keeps you signed in.
• NEXT_LOCALE — remembers which interface language you chose. It is a preference, not an identifier.
• Local storage — your theme (light or dark) and, if you set one, the speech-synthesis voice. Both stay in your browser and are never sent to us — the voice list comes from your own operating system, which is why it is not stored with your account.

All of these are necessary for the service to work or are settings you chose, so there is no consent banner to click through.

• To provide what you signed up for — your account, your content and your study data. Without them there is no service.
• Legitimate interest in keeping the service safe — the audit log and rate limits, which exist to detect and slow abuse. They are kept to what that needs and no more.
• Legal obligation — where we have to keep something to answer a lawful request. This has not arisen.

Only the services needed to run the application, and only what each one needs:

• Email delivery — the address and the message, for verification, password resets, deck shares and account-deletion notices.
• Object storage — audio and image files attached to words. It holds no account data.
• Error reporting — if configured, technical error reports which may include your user id so a fault can be traced to the request that caused it. Sampled, not a record of what you did.
• Google — only if you use Google sign-in, and only to complete that sign-in.
• reCAPTCHA — if configured, on sign-in and registration, to tell people from scripts.

Nothing is sold, rented, or handed over for anyone else’s marketing.

Your account and its data stay while the account exists. Freezing an account, from Settings, changes nothing about storage — it closes the account and hides you from the leaderboards, and signing in again brings it all back.

Deleting an account closes it immediately and permanently removes your personal data after a 30‑day grace period. We email a cancellation link when you ask, so a deletion nobody intended can be undone. What happens at the end of that period is exact:

• Removed — your email address, display name, password, any linked Google account, all study progress and review history, your library, your streak, XP and badges, deck shares you sent or received, and the IP addresses recorded against your actions in the audit log.
• Also removed — your private decks, and any card you made that no longer appears in anybody’s deck.
• Kept, with your name removed — decks you chose to publish, and cards of yours that other people have added to their own decks. Deleting those would take material out of other people’s study queues mid-course. They stay, attributed to nobody.
• Kept without your identity — the audit log entries themselves, so an abuse investigation is still possible. After the deletion they point at an account with no identifying information in it.

If you would rather not leave published decks behind, delete or unpublish them before you delete the account.

• See what we hold — most of it is on your Profile and Settings pages already.
• Correct it — display name, language and level are editable in Settings.
• Take it with you — every deck can be exported as a plain-text file that imports into Anki, from the deck’s actions menu. This is a real export, not a summary.
• Delete it — from Settings, without asking anyone. See above for what that removes and what it keeps.
• Object, or ask us to restrict processing — write to us and say what you object to.
• Complain — to the Dutch data protection authority, the Autoriteit Persoonsgegevens, if you think we have got this wrong.

Wooordje is not aimed at children under 16. If you believe a child has created an account, write to us and we will remove it.

If this policy changes in a way that affects what we collect or how long we keep it, the date at the top changes and we will say so on the site. This page is maintained in English; that version is the one that applies.