Privacy Policy

Last updated: February 2026

Introduction

WordLoci (“we”, “our”, “us”) operates the website wordloci.com. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

Information We Collect

Account Data (optional)

If you choose to create an account, we collect your email address and display name through Firebase Authentication. You may also sign in with Google, in which case we receive your name, email, and profile photo from Google.

Learning Progress

We store your learning progress, favorites, ignored words, mnemonic notes, memory palaces, and daily statistics. This data is stored locally in your browser (localStorage) and, if you are signed in, synced to Google Firestore so you can access it across devices.

Audio

We serve pre-generated text-to-speech audio files created using Google Cloud Text-to-Speech. No audio is recorded from your device.

How We Use Your Data

  • To provide spaced repetition learning and track your progress
  • To sync your data across devices when signed in
  • To monitor errors and improve the service (via Sentry)
  • To understand aggregate usage patterns (via Cloudflare Web Analytics — no cookies, no personal data)

Third-Party Services

  • Firebase Authentication & Firestore — account management and data sync (Google LLC)
  • Cloudflare — hosting, CDN, and privacy-friendly analytics (Cloudflare, Inc.)
  • Sentry — error monitoring (Functional Software, Inc.)

We do not sell your data to third parties.

Cookies

The WordLoci learning app does not set any tracking cookies. We use browser localStorage to store your preferences and learning data. Cloudflare Web Analytics is cookie-free.

Data Retention & Deletion

Your local data is stored in your browser and can be cleared at any time by clearing your browser data. If you have an account, you can request deletion of your cloud data by contacting us. Your Firestore data will be deleted within 30 days of your request.

Children’s Privacy

WordLoci is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Legitimate interest — providing and improving the learning app functionality, error monitoring
  • Consent — account creation, advertising cookies (opt-in via cookie consent banner)
  • Contract performance — providing the service you have requested (learning progress, data sync)

Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate personal data
  • Erasure — request deletion of your personal data
  • Restrict processing — request that we limit how we use your data
  • Data portability — request your data in a portable format
  • Object — object to our processing of your personal data
  • Withdraw consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@wordloci.com. We will respond within 30 days.

International Data Transfers

Your data may be transferred to and processed in the United States by our third-party service providers:

  • Firebase (Google LLC) — authentication and data sync, operating under Standard Contractual Clauses
  • Sentry (Functional Software, Inc.) — error monitoring, operating under Standard Contractual Clauses

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the “Last updated” date at the top.

Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please email us at privacy@wordloci.com.