Privacy
What Wordplay keeps about you, who can see it, and what leaves the server.
The short version
Lessons you publish are for anyone to read. Your conversations with a lesson's tutor and your email address stay private. An app you connect can read your drafts. There is no advertising, no analytics and no tracking, and nothing about you is ever sold or shared for advertising. To answer you, the tutor sends the wordplay and your conversation to the model provider (Anthropic). The site runs on a server in the United States. Deleting your account deletes everything you made here.
Who is responsible
Wordplay Labs, the company, runs the sites: Wordplay Labs, Wordplay Talk and Wordplay Creator. Questions and requests about anything on this page go to [email protected], in English, and are answered within a month.
What we keep, where it comes from, and why
| What | From where | Why |
|---|---|---|
| Your username, display name and email address | you, when you sign up | to have an account; the email is never shown to anyone |
| Your profile: picture, bio, affiliation and website, and your theme | you, here or on Wordplay Talk | shown on your author page and on Wordplay Talk; the theme so both sites look the way you chose |
| Your password, hashed with bcrypt, or your Google account's id and email | you, or Google when you sign in with it | to sign you in; the password itself is never kept |
| Lessons you publish, and your votes | you | they are the site; who voted is never shown |
| Drafts in the creator, the versions kept of each, and the files you attach | you | so you can go on writing; private to you |
| Your conversations with a lesson's tutor, with the steps you reached or skipped | you | so you can come back to a lesson where you left it; private to you |
| A row of counts for each message to a tutor or to the creator's assistant | the site, as you use it | when, which lesson or draft, which model, the tokens each way, the cost and how long it took; never what was said |
| Apps you connected, and their tokens | you | so an app can act for you until you disconnect it |
| Request logs | the web server | to keep the site running and to find faults |
An invitation accepted without an account, or a first message to the tutor sent signed out, makes a guest account on that device: a name like guest-1a2b3c, with no email or password, signed in by that browser alone. Its conversations are kept for that device; signing in later offers once to move them to your account. How much of the tutor you may use each day is counted from the rows of counts above, never from what you said.
Some wordplays let readers share an answer with everyone who works through them. What you share there is seen by every reader of that wordplay, with your name and picture only where the wordplay shows names and you have not chosen Anonymous on that wordplay. Its author can download every entry on it, shown as the wordplay shows them, to work with what readers sent. Settings lists what you shared, and Remove takes it away.
We keep these because you asked for an account and for what it does, because the site has to work, be kept safe and be paid for (logs, the counts, backups), and where the law requires it. Nothing is used to profile you and no decision about you is made by a machine. If you object to any of this, write to the address above.
Who can see what
An AI app you connect, such as ChatGPT or Claude, can read your own wordplays, including notes for the tutor and the Context returned with them, save changes in the creator, publish under your name, and read what readers shared on your wordplays, as their wall shows it. It cannot read your conversations with the tutor or your email address. Review the app's own privacy policy for what it keeps from your conversation and the data it receives.
Disconnect an app from Settings, under Connected apps, to end its access here. This does not erase copies already sent to the app or wordplays it saved or published. Saved drafts and their versions stay with your account under the same rules as your own writing.
A wordplay you publish is public, or unlisted (only its address reaches it), or private. Its votes count towards totals everyone sees.
Nobody else reads your conversations with a tutor: not the lesson's author, and not the team. An author sees counts for each of a lesson's steps (how many students reached it, completed it, skipped it or stopped there), only once five or more have started it, and never who. An author can also ask for a short report on what students found hard at each step: the model reads the conversations on that wordplay together and writes a few points a step, never quoting anyone and never about one person, and the author sees only those points. Conversations started before 3 October 2026 are never read for one.
The team sees the counts above, by person and by wordplay, to manage what the site costs and the allowances invitations give.
Where it is kept, and who else sees any of it
The site runs on one server in the United States (OVHcloud). Its database is there and nowhere else. If you are in the European Union or the United Kingdom, your account and what you make here are stored there.
- Anthropic, the model provider, receives what a tutor or the assistant needs to answer: the lesson's text, its author's notes for the tutor and your conversation; your draft, the files you attached and your messages to the assistant; and, for an author's report, the conversations on that lesson, with no names.
- Wordplay Talk is told your username, name and email address when you sign in there.
- Google, if you sign in with it: the sign-in happens between your browser and Google, and we receive your email address, name and Google account id.
- A connected app acts as you, within what you allowed. What it does with what it reads is that app's business and its policy, not ours. Disconnect it on your account page.
No analytics and no third-party scripts. We never sell personal information and never share it for advertising. Other sharing is limited to what you approve above or what the law requires.
Cookies and what your browser keeps
| Name | What it is for | How long | Needed? |
|---|---|---|---|
wordplay_session | keeps you signed in, here and on the creator | 30 days from signing in | yes, for an account |
wordplay_invite | holds an invitation until it is accepted | half an hour | yes, for an invitation |
Nothing here tracks you across sites, so there is no cookie banner to click through. Your browser also keeps your theme (signed in, your account's choice), the creator's layout and unsaved writing, which never reach the server until you save.
How long we keep things
| What | How long |
|---|---|
| Lessons, drafts and their versions | until you delete them or your account |
| A conversation with a tutor | until you delete it or your account |
| The counts for each message | kept for the site's accounts; when an account is deleted they stay, with no name on them |
| Request logs | 30 days |
| Connected app grants | until disconnected or expired; an approval lasts at most a year and its tokens are stored as hashes |
| Backups | a copy is made every night; the server keeps seven days of them and a second machine keeps a year, so what you delete is out of every backup within a year |
Your rights, and how to use them
You can read, correct, export and delete what the site holds about you.
- Your account page changes your password, disconnects Google or an app, and signs you out everywhere.
- Delete a conversation with a tutor from its history, at any time.
- Ask for a copy of everything the site holds about you, or for a correction, at the address above.
- Delete your account on your account page. It deletes your account here and on Wordplay Talk at once, with your wordplays, drafts, conversations and votes, and everything you wrote on Wordplay Talk. Backups age out within a year. If you cannot sign in, write to [email protected] and it is done within a month.
If you think the site is handling your data wrongly, write to us first; you can also complain to the data protection authority in your country (in the UK, the Information Commissioner's Office).
Age
You must be 13 or older to have an account, or older where your country sets the age of consent higher. An account we learn belongs to somebody younger is deleted.
Security and breaches
Passwords are hashed with bcrypt. Tokens are stored as hashes. The server is reached over HTTPS only. If a breach ever puts your data at risk, we will tell you, and the authorities the law names, as soon as we know.
Changes to this page
This page is written from the code and kept that way: a feature that starts keeping something new changes this page before it ships. Changes are listed here with their dates, and a change that matters is announced on the site.
- 11 October 2026: added connected AI apps and their access to your writing.
- 10 October 2026: rewritten with where the server is, how long things are kept, your rights in full, the age line and a list of changes.
Last updated 11 October 2026.