Privacy
Last updated 24 September 2026
WordBee is a daily word puzzle for families and small groups of friends. It keeps as little about you as it can: enough to sign you in and show your scores to your group. No adverts, no tracking, nothing sold.
If you're a child
Your grown-up set up your WordBee. We keep your first name, your PIN (scrambled, so nobody can read it) and the words you find.
Only the people in your groups can see your name and scores. Nobody sees your words until the next day. Your grown-up chooses your groups and can see your scores, and can delete everything whenever they like.
If something worries you, tell your grown-up.
Who we are
WordBee is run by Tom Keddie. For anything about your data, email hello@wordbee.co.uk.
What we keep
| What | Why |
|---|---|
| A grown-up's email address | To send the six-digit sign-in code. We never send anything else to it. |
| Names | The name each player chooses, shown to their groups. For a child, the name their grown-up gives them. |
| A child's PIN | To sign the child in. Stored scrambled (hashed), so it can't be read back. |
| Words you find, points, streaks | To keep score and show the scoreboard. |
| Groups and colours | Which groups you're in, and your colour in each. |
| Sign-in requests | The email address and a scrambled copy of the code, to check the code and stop too many codes being sent. Deleted after a day. |
| Wrong PIN tries | To lock a child's sign-in for 15 minutes after ten wrong tries. Deleted after a day. |
Words that aren't accepted never leave your phone. We don't collect your location, contacts, photos, age or date of birth. There are no cookies and no analytics. Your phone keeps your sign-in and settings (sound, light mode and so on) in its own storage, and they stay there.
Who can see it
- People in your groups see your name, colour and scores. They see the words you found only from the next day.
- Groups have at most four players. Only grown-ups can make or join groups, and only grown-ups see invite codes. A child joins a group only when their grown-up adds them.
- A grown-up can see and manage their own children's accounts.
- Nobody else. There are no public profiles and no way to search for players.
Who helps us run it
These companies process data for us, only to run WordBee:
- Supabase holds the database, on servers in London.
- Netlify hosts the app and runs its server code.
- Resend sends the sign-in emails.
Netlify and Resend are based in the United States, so some data may be handled outside the UK. They are bound by contract to protect it.
How long we keep it
For as long as the account exists. Sign-in requests and wrong PIN tries are deleted after a day.
Deleting your data
A grown-up can delete a child, or their whole account (which includes their children), from Settings in the app. Everything goes from our database straight away: names, email address, scores and group places. If you can't get into the app, email us and we'll do it for you.
Lost a phone? A grown-up can use Settings → Other devices to sign out everywhere else, and giving a child a new PIN signs that child out on every device.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email hello@wordbee.co.uk. A grown-up can ask on behalf of their child.
We use your data because you asked to play (for grown-ups) and because the child's grown-up set up their account (for children). If you're unhappy with how we've handled it, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If this changes, the date at the top will change with it.