Privacy
Last updated 23 October 2026
WordBee is a daily word puzzle for families and small groups of friends. It keeps as little about you as it can: enough to sign you in and show your scores to your group. No adverts, no tracking, nothing sold.
If you're a child
Your grown-up set up your WordBee. We keep your first name, your PIN (scrambled, so nobody can read it) and the words you find.
Only the people in your groups can see your name and scores. Nobody sees your words until the next day. Your grown-up chooses your groups and can see your scores, and can delete everything whenever they like.
If something worries you, tell your grown-up.
Who we are
WordBee is run by Tom Keddie. For anything about your data, email hello@wordbee.co.uk.
What we keep
| What | Why |
|---|---|
| A grown-up's email address | To send the six-digit sign-in code, and a group invite if someone invites you. We never send anything else to it. |
| Names | The name each player chooses, shown to their groups. For a child, the name their grown-up gives them. |
| A child's PIN | To sign the child in. Stored scrambled (hashed), so it can't be read back. |
| Words you find, points, streaks | To keep score and show the scoreboard. |
| Groups and colours | Which groups you're in, and your colour in each. |
| Sign-in requests | The email address and a scrambled copy of the code, to check the code. Deleted after a day. |
| Sign-in codes asked for | The address each code was for (with Gmail dots and anything after a + left out) and when, to stop too many codes being sent. Deleted after a day, even if the account is deleted first, so deleting can't be used to get round the limit. |
| Invites by email | The address a grown-up invites, who invited it and to which group, to send that one invite email and, when you sign in with that address, ask whether you want to join. You're only added if you say yes. Deleted when you answer, or after 30 days. |
| Invite emails sent | The address and who sent the invite, to stop too many invites being sent. Deleted after a day, even if the account is deleted first, so deleting can't be used to get round the limit. |
| Wrong PIN tries | To lock a child's sign-in for 15 minutes after ten wrong tries. Deleted after a day. |
Words that aren't accepted never leave your phone. We don't collect your location, contacts, photos, age or date of birth. There are no cookies and no analytics. Your phone keeps your sign-in and settings (sound, light mode and so on) in its own storage, and they stay there.
Who can see it
- People in your groups see your name, colour and scores. They see the words you found only from the next day.
- Groups have at most eight players. Only grown-ups can make or join groups, and only grown-ups see invite codes or invite by email. A child joins a group only when their grown-up adds them.
- A grown-up can see and manage their own children's accounts.
- Nobody else. There are no public profiles and no way to search for players.
Who helps us run it
These companies process data for us, only to run WordBee:
- Supabase holds the database, on servers in London.
- Netlify hosts the app and runs its server code.
- Resend sends the sign-in and invite emails.
Netlify and Resend are based in the United States, so some data may be handled outside the UK. They are bound by contract to protect it.
How long we keep it
For as long as the account exists. Sign-in requests, sign-in codes asked for, invite emails sent and wrong PIN tries are deleted once they are a day old, at the next hourly clear-out; an invite nobody takes up, after 30 days.
Deleting your data
A grown-up can delete a child, or their whole account (which includes their children), from Settings in the app. Everything goes from our database straight away: names, email address, scores and group places. The records of sign-in codes asked for and invite emails sent stay until they are a day old, as above. If you can't get into the app, email us and we'll do it for you.
Lost a phone? A grown-up can use Settings → Other devices to sign out everywhere else, and giving a child a new PIN signs that child out on every device.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email hello@wordbee.co.uk. A grown-up can ask on behalf of their child.
We use your data because you asked to play (for grown-ups) and because the child's grown-up set up their account (for children). If you're unhappy with how we've handled it, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If this changes, the date at the top will change with it.