Last updated: October 4, 2026
Wordiloo is a word game site for children. We collect as little data as possible: you can play, print and make your own puzzles without an account and without giving your name. In line with the General Data Protection Regulation (GDPR) and the French Data Protection Act, this page explains what we do with the little data we need.
1. Data controller
Just Color, Plaine Images, Imaginarium, 99A boulevard Constantin Descat, 59200 Tourcoing, France (SIRET 497 641 597 00032). For any question about your data: contact form.
2. A site for children, accounts for adults
No data is required to play. The member area (favorites, saved games, creations) is intended for parents, teachers and children with adult supervision: a child below the age of digital consent in their country (between 13 and 16 depending on the country; 15 in France, where the publisher is based) may only create an account with a parent's permission. We never ask for a child's age, address, photo or school. If you believe a child has created an account without this permission, write to us and we will delete it.
3. The data, how it is used and its legal basis
Playing without an account
Your progress in a puzzle is saved in your browser (local storage), not on our servers. You can erase it at any time with the "Start over" button or by clearing the site's data in your browser.
Member account
Email address, first name or username, password (stored only in irreversibly encrypted form), language, preferred level, favorites, games in progress and completed, puzzles created. Legal basis: performance of the service you request (contract).
If you tick the box provided, we email you at most once a month to announce new puzzles. Legal basis: your consent, which you can withdraw in your settings or through the unsubscribe link in each message.
Custom puzzles
Your word list is used only to make your puzzle; it is never published on the site. We keep the IP address to limit abuse (number of creations per day). Legal basis: legitimate interest (protecting the service).
Sending a puzzle by email
The address you enter is used only for this email. The sending is recorded in a log (address, date, IP address) to prevent mass mailing. Legal basis: performance of your request; legitimate interest for the log.
Contact form
Last name, first name, email, and if you provide them, phone number, company and website, as well as your message and your IP address (spam check). They are used only to reply to you. Legal basis: legitimate interest (replying to your request).
Internal statistics
We count the views, prints and games of each puzzle, without cookies, without IP addresses and without identifying anyone.
Security
Our host keeps technical logs (IP address, page requested, date) to keep the site secure. Legal basis: legal obligation and legitimate interest.
4. Who receives this data?
Only Just Color and its technical service providers, who act on our instructions:
- OVH (France): hosting of the site and database, in France;
- Brevo (Sendinblue SAS, France): sending emails (account confirmation, forgotten password, puzzles sent, replies to the contact form);
The site's fonts are hosted on our own servers: your browser does not contact Google Fonts. We never sell or rent any data.
5. How long?
- Account: as long as it is active; it is deleted with all its data after 3 years without sign-in, or immediately if you delete it yourself.
- IP addresses of creations and log of emails sent: 12 months.
- Contact form messages: 3 years after the last exchange.
- Game progress without an account: in your browser, until you erase it.
- Cookies: see the cookies page.
6. Your rights
At any time, you can access your data, correct it, erase it, receive a copy of it (portability), object to or request restriction of its processing, and withdraw your consent. From your member area, you can directly edit your information, export all your data to a file and delete your account. For anything else, use our contact form; we reply within one month.
If you believe your rights are not being respected, you can file a complaint with the CNIL, the French data protection authority (www.cnil.fr), or with the data protection authority of your country.
7. Security
The site is served over HTTPS. Passwords and sign-in tokens are stored only in irreversibly encrypted form. Access to the administration area is restricted and protected.
8. Changes
We may update this policy, for example when we add a service. The date of the last update is shown at the top of the page.