Last updated: 29.10.2026
This policy explains what personal data Word Weave ("we", "us") collects when you use word-weave.com, why we do so, and what rights you have. We do not sell your personal data.
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Tim Meyer, Germany
Email: support@word-weave.com
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Account data: username, email address, password (stored only as a hash), interface language, practice preferences, optional profile picture | Creating and running your account, logging you in, personalising the app | Art. 6(1)(b), performance of the contract (providing the service) |
| Sign-in with Google: if you choose it, Google shares basic account details with us (such as your email address and name) | Authentication | Art. 6(1)(b) |
| Content you create: sets, sections, vocabulary entries, imported lists | Storing and displaying your content, providing practice | Art. 6(1)(b) |
| Learning activity: practice results, streaks, usage metrics | Showing your progress and streaks; understanding how Word Weave is used so we can improve it | Art. 6(1)(b) for progress and streaks; Art. 6(1)(f), legitimate interest in improving the service, for usage analysis |
| Emails: verification and password-reset emails; messages you send us via the feedback/support function | Account security and support | Art. 6(1)(b) and (f) |
| Technical data: IP address, browser and device information, request details, error and diagnostic logs | Operating and securing the site, blocking bots and abuse, troubleshooting support requests | Art. 6(1)(f), legitimate interest in security and stable operation |
| Search performance data from Google Search Console (aggregated, about visits from Google Search) | Improving how the site appears in search | Art. 6(1)(f) |
Usage analysis is carried out on results and metrics, not to read your individual vocabulary entries.
We use a session cookie to keep you logged in, and your browser's local storage to remember settings and keep the app working across page reloads. These are technically necessary for the service you request, so no consent banner is used at the moment. We currently do not use advertising or tracking cookies. If this changes, we will update this policy and ask for consent where required.
We use service providers who process data on our behalf:
We have, or will conclude, data processing agreements with processors where required. We do not sell personal data and do not share it for advertising.
We may also disclose data where we are legally obliged to, or where necessary to establish, exercise or defend legal claims.
Some providers (for example Resend, Cloudflare and Google) are or belong to companies based outside the EU. Where data is transferred to such countries, we rely on the EU–US Data Privacy Framework (where the provider is certified) or on standard contractual clauses approved by the European Commission.
Under the GDPR you have the right to access your data, have it corrected or deleted, restrict or object to processing, and receive your data in a portable format. If processing is based on consent, you may withdraw it at any time. To use these rights, or to have your account deleted, email support@word-weave.com. We may need to verify your identity first.
You also have the right to complain to a data protection authority.
Word Weave may be used by pupils. If you are under 13, please ask a parent or guardian before creating an account. If we learn that a child's data was collected without the required permission, we will delete it.
We protect data using measures such as password hashing, encrypted connections (HTTPS) and access restrictions. No online service is completely secure.
Word Weave is under active development, and we may introduce new features or services. We will update this policy before such features process your data, and will notify you of significant changes by email or in the app.
Questions about privacy: support@word-weave.com