Privacy policy | Wordlyy

The short version

Students don’t create accounts. We keep a game’s nicknames, avatars, answers and scores, nothing more.
Teacher accounts hold a username, a name, a phone number, an optional email and a hashed password.
We don’t sell personal data, and the screens students play on show no ads.
Write to [email protected] and we’ll show you or delete what we have about you.

1. Who we are

Wordlyy (“we”, “us”) runs the website wordlyy.com and the classroom games on it. We decide how the data described here is used. For any question about this policy or your data, write to [email protected].

2. What we collect

Teachers and administrators

A username, your full name, the phone number you give when you register (so we can reach you about your account; we don’t share it or use it for marketing), an email address if you give us one, and your password, which we only store as a one-way hash (bcrypt), never in readable form. We also keep your role, the date the account was created and the time you last signed in. For the games you run we store the title, the settings, any settings you save for later, the players and the results.

Students

Students don’t create accounts. When a student joins a game we store the nickname and avatar they choose, the time they joined, what they send during the game (for example answers in the Categories Game, typed clues and votes in English Spy), their score and their final place. A random code is kept on the phone so the student can get back into the game after a refresh.

We don’t ask students for their real name, email address, phone number, age, school or location.

Technical data

Like most websites, our servers keep logs with the IP address, the type of browser, the page requested and the time. We use them to keep the site running and secure, and keep them only as long as we need them for that.

3. How we use it

to run the games: show the right screen to the right person and keep the score;
to let teachers see the results of their own games afterwards;
to sign teachers in and keep accounts secure;
to answer messages you send us;
to find and fix problems, and to improve the games, using overall numbers rather than individuals.

We use account data because we need it to provide the service you asked for, technical data because we have a legitimate interest in keeping the site secure, and advertising cookies only where you agree to them if the law requires your consent. We don’t use student data for advertising or profiling.

4. Local storage and cookies

Wordlyy itself doesn’t set cookies. It saves a few small values in your browser’s local storage, which stay on your device:

Name	What it’s for
`lingoarena.token`	Keeps a teacher or administrator signed in. Removed when you sign out.
`lingoarena.player.[code]`	Remembers which game a student joined on this device, so a refresh doesn’t kick them out.
`lingoarena.nickname`	The last nickname used, filled in for the next game.
`lingoarena.muted`	Whether sound effects are switched off.
`wordlyy.crosswords.v1`	Your solo crossword stars, times and unfinished grids. Nothing is sent to us.

You can delete them at any time in your browser settings. If ads are shown, see the next section.

5. Advertising

Some public pages, such as the game guides and the proverb list, may show ads served by Google AdSense. There are no ads on the pages students use to join and play, on the projector screen, or in the teacher’s dashboard.

Google and its partners may use cookies or similar technologies to show ads based on your earlier visits to this and other websites. You can switch off personalised ads in Google’s Ad Settings or at aboutads.info, and read how Google uses data from sites that use its services. Where the law requires consent (for example for visitors from the EU, the EEA and the UK), you’ll be asked before personalised ads are shown.

7. Children

Many of our players are school students, and some are children. That’s why students don’t need an account and we collect as little about them as possible.

Teachers use Wordlyy under their school’s rules and are responsible for how they use it with their students. Please ask students to use a nickname rather than their full name. If a student has entered something personal (a full name as a nickname, for example) and you want it removed, write to [email protected] with the game code and the nickname.

8. How long we keep data

Teacher accounts: until the account is deleted. Ask us and we’ll delete yours.
Games and results, including students’ nicknames and answers: until the teacher or an administrator deletes the game.
Server logs: only as long as needed to keep the site running and secure.

9. Security

The site is served over HTTPS, passwords are stored as one-way hashes, and only the teacher who ran a game and our administrators can see its results. No system is perfectly secure, but we take reasonable steps to protect your data and fix problems quickly.

10. Your rights

You can ask us what we store about you, and ask us to correct or delete it, or to stop using it. Write to [email protected]. Teachers, please write from the email on your account or tell us your username; for a student, send the game code and the nickname. We answer within 30 days. You also have the right to complain to your local data protection authority.

11. Changes to this policy

If we change this policy we’ll update the date at the top of this page. If a change matters, for example we start collecting something new, we’ll also say so on the site.

12. Contact

Questions about privacy: [email protected], or use our contact page.