Privacy Policy
How WordAssist handles personal data, and the rights you have under the General Data Protection Regulation (EU) 2016/679.
Last updated: 10 September 2026
1. Who is responsible for your data
WordAssist (“we”, “us”) operates the website wordassist.eu. For the purposes of the GDPR, the data controller is:
- Entity: A Simple Plan VOF
- Registered address: Lindendreef 3, 3061 Bertem, Belgium
- Company number: BE 1004.587.428
- Email: wordassisteu@gmail.com
We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR. Privacy questions can be sent to the address above.
2. What data we collect
2.1 Data you provide to us
If you write to us through the contact page or by email, we receive the name, email address and message content you choose to send. We use this solely to answer you. Messages sent through the contact form are stored by our hosting provider (Netlify Forms) until we delete them; they are not deleted automatically, so we do this ourselves — see section 7.
2.2 Data collected automatically
Our hosting provider, Netlify, Inc. (San Francisco, USA), records standard server access logs when your browser requests a page. These logs contain your IP address, the date and time of the request, the page requested, your browser type and operating system, and the referring page. IP addresses are personal data under the GDPR. These logs exist for security, abuse prevention and troubleshooting. This site is served as static files and runs no server-side functions of its own; the function and edge-function logs that Netlify keeps are retained for up to 7 days, depending on the hosting plan, after which they are deleted automatically. We do not keep a separate copy and we do not analyse them unless we are investigating a specific problem.
2.3 Information stored on your device
The word tool itself runs entirely in your browser. The words you type are never sent to our servers — the dictionary is downloaded to your device and searched there. We store two small preferences in your browser’s local storage: your chosen interface language and your light or dark theme. These stay on your device, are not transmitted to us, and can be cleared at any time through your browser settings.
2.4 Advertising
This site is funded by advertising served through Google AdSense. Google and its advertising partners collect data about your visit for the purposes described in section 4 and in our Cookie Policy.
3. Legal bases for processing
| Purpose | Data | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Delivering the website securely | IP address, request metadata | Legitimate interests, Art. 6(1)(f) |
| Answering your message | Name, email, message | Legitimate interests, Art. 6(1)(f) |
| Remembering language and theme | Local storage preferences | Strictly necessary for a service you requested — no consent required under the ePrivacy Directive |
| Non-personalised advertising | IP address, ad interaction data | Legitimate interests, Art. 6(1)(f), plus consent where required for storage on your device |
| Personalised advertising | Advertising identifiers, browsing behaviour | Consent, Art. 6(1)(a) |
Where we rely on consent, you give it through the consent banner shown on your first visit, and you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
4. How Google AdSense uses data
Google, as a third-party vendor, uses cookies and similar technologies to serve ads on this site. Specifically:
- Google uses cookies to serve ads based on your prior visits to this and other websites.
- Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the internet.
- Where you have consented, Google may combine this with data from your Google account to personalise advertising.
- Google also processes data to measure ad performance, cap how often you see the same ad, and detect invalid traffic and fraud.
You can opt out of personalised advertising by visiting Google Ad Settings. Details of how Google uses data when you use its partners’ sites are set out at policies.google.com/technologies/partner-sites. For EEA, UK and Swiss users, Google acts as an independent controller for advertising data; see the Google Ads Data Processing Terms.
5. Who we share data with
We do not sell your personal data. Data is shared only with the following categories of recipient, each acting under a contract or under their own controller obligations:
- Hosting: Netlify, Inc. — server logs and content delivery.
- Advertising: Google Ireland Limited and its certified advertising partners — see section 4.
- Consent management: Google Ireland Limited (the consent management solution built into Google AdSense) — records your consent choices.
- Contact form processing: Netlify Forms (Netlify, Inc.).
- Authorities, where we are legally obliged to disclose data.
6. Transfers outside the EEA
Some of the providers above are established in, or transfer data to, the United States. Where that happens, transfers are protected by the European Commission’s Standard Contractual Clauses, and where applicable by the recipient’s certification under the EU–US Data Privacy Framework. You may request a copy of the relevant safeguards from the contact address in section 1.
7. How long we keep data
- Hosting logs: Netlify retains function and edge-function logs for up to 7 days, depending on the hosting plan, then deletes them. We run no server-side functions and keep no logs of our own.
- Contact form submissions: we aim to reply within 3 working days and delete the submission from Netlify Forms 30 days after your enquiry has been dealt with. Any email correspondence that follows is kept for up to 12 months after the enquiry is closed, then deleted.
- Consent records: retained for the period required to demonstrate compliance, typically 12 months.
- Advertising cookies: as set out in the Cookie Policy.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you (Art. 15).
- Rectify inaccurate or incomplete data (Art. 16).
- Erase your data (Art. 17).
- Restrict processing in certain circumstances (Art. 18).
- Receive your data in a portable, machine-readable format (Art. 20).
- Object to processing based on legitimate interests, including profiling for direct marketing (Art. 21).
- Withdraw consent at any time, through the consent banner or the link in our Cookie Policy (Art. 7(3)).
To exercise any of these rights, contact us at wordassisteu@gmail.com. We respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Belgium, the Data Protection Authority (Rue de la Presse 35, 1000 Brussels) — or with the authority in your country of residence.
9. Children
This site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Security
The site is served exclusively over HTTPS. We keep no user accounts, no passwords and no payment data, which substantially limits the data that could be exposed. Server-side logs held by our hosting provider, Netlify, are retained for up to 7 days, depending on the hosting plan and then deleted automatically, so no long-lived record of individual requests exists. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. Changes to this policy
We may update this policy to reflect changes to the site or to the law. The date at the top shows when it was last revised. Material changes will be announced on the site.
12. Contact
Questions about this policy or about how we handle your data can be sent through our contact page or to wordassisteu@gmail.com.