Privacy Policy

WordGarden.io is operated by Bit Forge Limited in Hong Kong. Bit Forge Limited is responsible for the personal data described in this policy.

Privacy questions and requests can be sent to privacy@wordgarden.io.

This policy applies to the public WordGarden website and the static content used by its word cards. The service is available globally and is intended for people aged 13 or older. It is not directed to children under 13.

If the law where you live says you are not old enough to consent to Analytics yourself, keep Analytics rejected unless a parent or guardian gives any authorization that law requires. WordGarden works normally without Analytics.

WordGarden does not currently offer user accounts, uploads, or public user profiles.

• Requests and technical logs. When a person or automated client such as a search crawler requests a page or file, our infrastructure records technical information. This can include IP address, date and time, requested URL and query string, request method and status, referrer, browser or device information, and performance or security data.
• Optional Google Analytics. If you accept Analytics, Google can receive a browser identifier, pages viewed, site interactions, approximate location, referrer, and browser or device details. WordGarden keeps advertising storage and ad personalization disabled, does not use Google Signals, and does not show targeted advertising.
• Preferences on your device. Your theme, word-card description length, and Analytics decision are stored in your browser. Storing these choices does not by itself send them to WordGarden.
• Search activity. Word searches are matched against an index inside your browser, rather than sent to a search API. Opening a result makes an ordinary request for the selected word-card path, which can then appear in technical logs.
• Waiting-list preview. The current waiting-list form is not connected to a submission service. An address typed there remains in the open page and is not transmitted or retained by WordGarden when the form is submitted.
• Messages to us. If you email the privacy address, we process the message, contact details, and related correspondence so we can respond.

• Provide the pages, word data, audio, and features you request.
• Keep WordGarden reliable, diagnose faults, prevent abuse, and protect the service.
• Understand aggregate site use and improve the product, but only through Google Analytics after consent.
• Respond to privacy requests and meet legal obligations.

Where applicable law requires a legal basis, we rely on legitimate interests to operate and secure the public service, consent for optional Analytics, and legal obligations where we must retain or disclose information. You may object to processing based on legitimate interests by contacting us.

WordGarden currently uses these browser-side records:

Use Privacy choices in the footer to reject or withdraw Analytics consent. Withdrawal stops future Analytics collection on that browser and removes readable first-party Google Analytics cookies. It does not erase information already sent to Google. Clearing browser storage resets all local choices.

Providers used to run WordGarden include:

• Scaleway for the production web server in the Netherlands.
• Cloudflare for DNS and static-content storage and delivery.
• Grafana Cloud for service monitoring and log analysis.
• Google Analytics for optional usage measurement after consent.

Providers process information under their own security and privacy terms. We may also disclose information where required by law, or where reasonably necessary to protect users, WordGarden, or the public. We do not sell or rent personal information and do not use it for targeted advertising.

Bit Forge Limited operates from Hong Kong, while providers may process information in the Netherlands, Germany, elsewhere in the European Economic Area, the United States, or other countries where they operate. Where transfer safeguards are required, we rely on the contractual and legal transfer mechanisms offered by those providers.

• Web-server access logs rotate daily, with 14 archived copies, so they are ordinarily kept locally for up to about 15 days.
• Local application-container logs use up to five 10 MB files per container, with rotated files compressed. System-journal entries are kept for at most 14 days and 250 MB, with 1 GB of host disk space reserved.
• Logs forwarded to Grafana Cloud are retained for 14 days under the current service plan.
• The WordGarden Google Analytics property retains event data for 2 months and user data for 14 months. The user-data retention period does not reset on new user activity. These settings do not affect most standard reporting based on aggregated data, which may remain available for longer.
• The Analytics choice remains on your device for 180 days. Theme and description-length choices remain until you clear site data.
• Privacy correspondence is kept only as long as needed to respond, resolve the request, and meet legal or security obligations.

We use HTTPS, restricted operational access, and service monitoring to protect WordGarden. No online service can guarantee absolute security, but we review access and operational safeguards as the service evolves.

Depending on where you live, you may have rights to ask for access, correction, deletion, restriction, objection, or portability, and to withdraw consent. Hong Kong residents may request access to and correction of their personal data. You may also complain to the privacy or data-protection authority where you live, including the Office of the Privacy Commissioner for Personal Data in Hong Kong.

WordGarden has no account identifier. Some log and Analytics data may therefore not be reasonably linkable to your name. To help us assess a request, include the relevant dates, device or browser details, and any identifier you can lawfully obtain from that browser. We may ask for enough information to verify the request, but we will not request more than is reasonably necessary.

Send a request to privacy@wordgarden.io. Withdrawing Analytics consent is also available immediately from Privacy choices in the footer.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to WordGarden, contact us so we can investigate and delete it where appropriate.

We will update this page when our data practices or providers materially change. The date at the top shows the latest revision. If a change requires a new Analytics decision, we will ask again before loading it.