Privacy Policy

Last updated: 1 September 2026

WordFiddle is a free tool for making interactive classroom activities. This policy is short because the site is built to collect as close to nothing as possible.

The short version

What is stored, and where

• Saved activities are stored in your browser's local storage on your own device. They never reach us. If you clear your browser data, they are gone — we cannot recover them.
• Shared activities are encoded inside the share link itself. The link is not stored on our servers. Anyone you send the link to can view and copy that activity, so do not include personal information about yourself or your students in a shared activity.
• Cloud-saved activities (only if you sign in) are stored on our database server, described below.

Accounts and cloud saves

Accounts are optional and exist for one reason: so your activities follow you to other devices. When you create one, we store exactly three things:

• Your email address — used as your login. We use it for nothing else: no marketing, no newsletters, no sharing.
• Your password — checked by our authentication provider (Supabase), which stores it only as a salted hash. We ourselves cannot read it.
• Your display name and the activities you save (text plus any pictures you uploaded into them).

Cloud-saved activities are visible only to your own account — the database enforces this row by row, so even a mistake on our side could not expose one teacher's activities to another. We do not use account data for advertising and we do not sell it.

Analytics

We use Cloudflare Web Analytics to count page views. It is cookie-free and does not collect personal data, fingerprint visitors, or track you across other sites. It gives us aggregate numbers (how many people visited, which pages) and nothing more. You can read Cloudflare's description of it on their website.

Children and students

The site asks nobody for personal information — adults or children. Teachers may use WordFiddle in front of students, and students may play shared activities, but the site does not collect anything from them: no names, no emails, no results reported to us. Activity results (where a template scores a game) are shown on the player's own screen only and are not sent anywhere.

One request on students' behalf: activities you save to the cloud sit on a server, so please don't put students' personal information into those unless you have consent to do so.

Picture search

When you search for pictures inside the editor, your browser queries two third-party image services — Openverse and Wikimedia Commons — directly. That search is between your browser and those services under their own privacy policies; we never see it. Pictures come with licences (CC0, Public Domain or CC BY), and the app stores and displays the required credits automatically.

Hosting

The site is hosted by Cloudflare. Like any host, Cloudflare necessarily processes standard technical logs (IP addresses, request times) to serve the site and protect it from abuse, under their own privacy policy. We do not analyse or sell that data.

For signed-in teachers, account data and cloud-saved activities are stored on Supabase (postgres databases, Singapore region) under their own security and privacy policies.

Your rights

If you never create an account, we hold no personal data about you — there is nothing for us to export, correct, or delete. To remove locally saved activities, clear your browser storage for this site.

If you do have an account: you can see and edit everything we hold (your display name and your saved activities) from inside the app, and you can delete any activity at any time. To delete your whole account and every cloud-saved activity, contact us and we will remove them — normally within a few days.

Changes to this policy

If the site ever adds accounts, cloud saving, or anything that collects personal data, this policy will be rewritten before that launches, and the date above will change.

Contact

Questions about this policy: hello@wordfiddle.com or see the contact page.