Privacy Policy

Last updated: May 2026

Introduction

WordLoci (“we”, “our”, “us”) operates wordloci.com and the WordLoci mobile apps. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

Information We Collect

Account Data (optional)

If you choose to create an account, we collect your email address and display name through Firebase Authentication. You may also sign in with Google or Apple, in which case we receive the sign-in information provided by that service, such as your name and email address.

Learning Progress

We store your learning progress, favorites, ignored words, mnemonic notes, memory palaces, user wordlists, writing-practice progress, and daily statistics. This data is stored locally on your device or in your browser and, if you are signed in, synced to Google Firestore so you can access it across devices.

Notifications

The mobile app can schedule local study reminders if you enable notifications. The current mobile app does not register a remote push-notification token.

Audio

We serve pre-generated text-to-speech audio files created using Google Cloud Text-to-Speech. No audio is recorded from your device.

Photos, Camera, Location, and Contacts

The current mobile app does not request camera, photo library, location, microphone, or contacts access.

How We Use Your Data

  • To provide spaced repetition learning and track your progress
  • To sync your data across devices when signed in
  • To send welcome emails and support account-related requests
  • To monitor errors and improve the service
  • To understand aggregate usage patterns and improve product quality

Third-Party Services

  • Firebase Authentication & Firestore — account management and data sync (Google LLC)
  • Apple Sign in with Apple — optional Apple account sign-in on iOS
  • Google Sign-In — optional Google account sign-in
  • Cloudflare — hosting, CDN, and privacy-friendly analytics (Cloudflare, Inc.)
  • Sentry — error monitoring (Functional Software, Inc.)
  • PostHog — product analytics when enabled in production

We use Google AdSense on our reference pages (see Advertising section below). We do not sell your data to third parties.

Cookies

The WordLoci learning app does not set any tracking cookies. We use browser localStorage to store your preferences and learning data. Cloudflare Web Analytics is cookie-free.

Our reference pages (phrase definitions, browse pages) may use cookies for advertising purposes — see the Advertising section below. You can manage your cookie preferences via the cookie consent banner shown on those pages.

Advertising

We display ads on our reference pages (phrase definitions, chapter listings, and browse pages) using Google AdSense. Google may use cookies to serve ads based on your prior visits to this or other websites. You can opt out of personalised advertising via the cookie consent banner on those pages, or by visiting Google Ads Settings.

The learning app itself (flashcards, quizzes, dictionary, etc.) does not display ads and does not use advertising cookies.

Data Retention & Deletion

Your local data is stored on your device or in your browser and can be cleared by deleting the app or clearing browser data. If you have an account, the mobile app includes an in-app account deletion control that deletes your WordLoci account and synced cloud data. If you cannot access the app, contact us at privacy@wordloci.com. We will process verified deletion requests within 30 days.

Children’s Privacy

WordLoci is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Legitimate interest — providing and improving the learning app functionality, error monitoring
  • Consent — account creation, advertising cookies (opt-in via cookie consent banner)
  • Contract performance — providing the service you have requested (learning progress, data sync)

Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate personal data
  • Erasure — request deletion of your personal data
  • Restrict processing — request that we limit how we use your data
  • Data portability — request your data in a portable format
  • Object — object to our processing of your personal data
  • Withdraw consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@wordloci.com. We will respond within 30 days.

International Data Transfers

Your data may be transferred to and processed in the United States by our third-party service providers:

  • Firebase (Google LLC) — authentication and data sync, operating under Standard Contractual Clauses
  • PostHog — product analytics, operating under applicable data processing terms
  • Sentry (Functional Software, Inc.) — error monitoring, operating under Standard Contractual Clauses

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the “Last updated” date at the top.

Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please email us at privacy@wordloci.com or open an issue on our GitHub repository.