Privacy Policy

Effective Date: 04/10/2026
This Privacy Policy describes how Leantyped B.V. ("we", "us"), registered in the Netherlands (KvK 80878245), collects, uses, and protects your personal data when you use wordholder.com and the Word Holder browser extension (obsolete) (together, the "Application").
Leantyped B.V. is the data controller for your personal data under the General Data Protection Regulation (GDPR).

For the Google measurement services described below, see how Google processes business data.

1. What Data We Collect

• Account Data: Every visitor gets a randomly generated account identifier — including anonymous use, so your saved words can be kept without signing in. This identifier is pseudonymous and can be associated with your saved words, usage, and Google ad click identifier. If you sign in (with Google or an email sign-in link), we additionally store your email address.
• Searched Words: When you look up a word, it is stored in our own database under your account so you can review and practice it later.
• Log Data: Standard technical details such as IP address, browser type, and pages visited.
• Analytics: If you accept the consent banner, Google Analytics is used to understand how users interact with the Application. We send behavioural events such as page views, word lookups and quiz activity from our own servers. These events do not include the words you look up, and no Google Analytics cookies or scripts are placed in your browser. Basic first-party usage measurement (our own servers only) runs either way.
• Advertising & Conversion Measurement: If you arrive from a Google ad, the address may contain a Google click identifier called gclid. We pass that identifier to our own server and associate it with your randomly generated Word Holder account identifier. When you complete a measured action, such as starting or finishing a Verb Gym drill, looking up a word, signing up, reviewing, returning, or completing a quiz, and you have accepted the consent banner, we may send Google Ads the click identifier, the type and time of the action, an assigned value and currency, a pseudonymous transaction identifier derived from your Word Holder account identifier, and the current consent state. We do not include the words you look up. If you accepted the consent banner and sign in, a hashed (SHA-256) version of your email may also be included for Enhanced Conversions; we never transmit plain-text email addresses.

2. How We Use Your Data

• To provide and improve the Application.
• To let you access your personal search history.
• To analyze usage and improve features.
• To measure the effectiveness of our advertising campaigns.
• To ensure security and prevent abuse.
• Support access: To help you, investigate a problem, or check that the Application works as you experience it, an authorised member of our team may view your account as you see it, including your saved words, texts, and messages. This happens on a temporary copy of your account data: your account itself is never changed, nothing is sent in your name, and the copy is deleted automatically within a few hours. We keep a record of who viewed which account and when.

We never sell your data.

3. Legal Bases for Processing (GDPR)

• Contract: To provide you with access to the Application and your account.
• Legitimate Interest: To improve the Application, ensure security, and support you.
• Consent: For Google Analytics usage statistics and Google Ads click-conversion measurement, including Enhanced Conversions email matching. You can decline these optional uses. The Application works the same either way; necessary functions do not depend on your choice.

4. Third-Party Services

• Google Sign-In (Google LLC): If you choose “Continue with Google”, authentication happens on Google’s site and we receive your verified email address. No Google scripts run inside the Application.
• Google Analytics (Google LLC): Provides usage statistics, only after you accept the consent banner. Events are sent to Google from our servers (the Measurement Protocol); we do not set Google Analytics cookies in your browser.
• Google Ads (Google LLC): Used for conversion measurement only when you arrive from a Google ad. Conversion uploads are sent from our servers; we do not set Google Ads cookies or run Google advertising scripts in your browser. Conversions are uploaded only if you accept the consent banner. If you use the Application before answering it, the conversions you trigger (for example, starting a drill) are kept on our servers and uploaded only if you accept; if you decline, they are deleted, and if you have not answered within 30 days, they are deleted as well. Nothing is uploaded after you decline. An upload contains the Google click identifier and the conversion details, which are pseudonymous rather than anonymous, and never the words you look up. If you consented and signed in, a hashed email may be included for Enhanced Conversions. Plain-text email is never transmitted. Learn more about how Google processes business data.

5. Browser Extension (Obsolete)

The Word Holder browser extension is obsolete: it has been discontinued and is no longer available for installation. While it was distributed, the following applied specifically to the extension:

• Text Selection: The extension monitored your text selection solely to determine whether you had selected a single word. It did not read, collect, or transmit any page content.
• Word Lookups: When you right-clicked and chose to look up a word, only the selected word and the chosen language were sent to the Word Holder API to fetch the definition.
• Local Storage: The extension stored authentication tokens and user preferences locally on your device using Chrome's storage API. If you still have the extension installed, you can remove it and this locally stored data with it.
• Anonymous Use: The extension could be used without signing in. In anonymous mode, no data left your device except the word lookup request, and no personal data was stored on our servers.
• Authentication: The extension has been discontinued and extension sign-in is no longer supported. While it was available, sign-in used a secure PKCE-based flow; those sign-in systems have since been removed.

6. Data Retention

Account data is kept as long as you maintain an account. Search history is stored until you delete your account or request erasure. Log data is kept for a limited period for security and troubleshooting. Google click identifiers and our conversion records are kept with the associated account until the account is deleted or the records are no longer needed for measurement and auditing. Google applies its own retention rules to data it receives. Temporary support copies of your account are deleted within a few hours; the record of the access is kept.

7. Your Rights (under GDPR)

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict processing.
• Request a copy of your data (data portability).
• Withdraw or change consent for Google Analytics and Google Ads conversion measurement at any time by selecting Privacy choices in the site menu or in Settings. Changing your choice affects future processing and does not remove data already sent.
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise these rights, email us at info@wordholder.com.

8. Data Security

We use encryption and security measures to protect your data. However, no system is 100% secure, and we cannot guarantee absolute protection.

9. Changes to This Privacy Policy

We may update this Privacy Policy. Changes will be posted on this page, and the "Effective Date" will be updated.

10. Contact

Leantyped B.V.

KvK 80878245
Email: info@wordholder.com