Privacy Policy
Last updated: 12 November 2026
LinguWhee makes personalised learning materials and free games for families. This page explains what personal data we keep, why, for how long, and who else receives it.
Who is responsible
LinguWhee is run by MoMaSeAn B.V., a company in the Netherlands, which decides how your personal data is used (the "controller"). We follow the EU General Data Protection Regulation (GDPR) and Dutch law. Contact us at info@linguwhee.com.
What we keep, and why
- Your account: your email address, a scrambled form of your password (we never see the password), and a history of changes to the account. For accounts created without a password (see "The game Cursa melcilor") we also keep technical details such as your IP address, to prevent abuse. We use this to let you log in, to keep one account per person and to prevent abuse. We keep an account until you ask us to delete it.
- Our email list and emails: if you subscribe or tick a box to hear from us, we keep your address, your chosen languages, and when and how you agreed. You can unsubscribe with the link in any marketing email. We also keep a record of the emails the site sends.
- Payments: card payments are handled by Stripe, and your card number never reaches us. We keep the amounts, references, status and receipts as accounting records.
- Books and tools: when you make a book or use a tool, we keep a record of what you ran, the settings you typed (such as the theme and languages) and the files made. The text you type to describe what you want is sent to AI service providers so they can produce the result, so please do not type anything you would not want a service provider to process.
- Messages and the waitlist: messages you send us from your account, and, if you joined our waitlist, your email, name and answers.
- Free pages, books and downloads without an account: we record what was used, when, and your IP address, browser and the page you came from, to count how many people use what we make.
We keep these records for as long as we need them for the purposes above, and delete them if you ask.
The game Cursa melcilor
Why we ask for an email. To set up a game room, the adult types an email address. We ask for it to prevent abuse (one open room per person, no mass-created rooms) and to learn how many people play. We do not verify the address and do not send you anything unless you ask. The address becomes an account that has no password: nobody can log in to it unless they later choose to set a password through a link we email to that address. A signed-in member does not need to type an email.
The setup form. The form is protected by Google reCAPTCHA, which receives information about your browser to tell people from bots. If one of our checks refuses a form, we record the refusal with the reason, the IP address and the address that was typed.
What a room stores. The game settings (level, theme and optional first names for the child and the adult, which you may leave empty), the saved state of the game, and the codes and keys that let the two players join and keep their seats. A child needs no account.
How long a room lasts. A room ends automatically after 60 minutes without a move, or when the adult closes it. 7 days after it ended, the saved state and the names are erased from the live database; the room's record and counts (such as how many games were finished) remain. Backups keep copies for longer: a room's state and names can still be in backups for up to 52 weeks (see "Backups").
What the game does not do. There is no chat, no microphone or camera, and no recording.
Emails about the game. If you tick "Tell me about new games" we add your address to our email list. If you ask us to email your room codes, we send them once to the address of the account.
Logs and backups
Our servers keep logs to run the site, fix faults and prevent abuse. A log entry has the time, your IP address, the page requested and, if you are signed in, your account number. Entries about some actions, such as creating an account, joining the email list, sending you an email or a form we refused, also include your email address. Logs never contain your password or the secret parts of links we email you. Logs are overwritten as new ones are written, so they are kept for a limited time.
We back up the database every hour. Hourly copies are kept for 3 days and one copy per week is kept for 52 weeks, and the backups are also copied to a second location. Data deleted from the live site (for example a room's state, or an account you asked us to delete) can remain in backups until those copies expire. We use backups only to recover from a failure.
Cookies and similar technologies
- Our session cookie keeps you logged in, protects forms and remembers where you first came from during your visit. It is sent only over secure connections and expires automatically.
- Cookiebot records your cookie choices. Optional categories stay off until you agree.
- Google Analytics measures how the site is used, only if you allow statistics cookies.
- Google reCAPTCHA runs on some forms to stop bots.
- Local storage in your browser keeps small settings for you, such as your chosen language and your seat in a game room. It is never sent to other companies.
- Buy Me a Coffee: only if you allow the Statistics category, a small "support us" button is loaded and may set its own cookie. Otherwise nothing is loaded from them.
- YouTube: only if you allow the YouTube category, and only on the one blog post with a YouTube video. Otherwise the post shows a link and nothing is loaded from YouTube.
The fonts and scripts that make our pages work are served from our own server, not from other companies. The only things your browser loads from other companies are the ones named on this page. The full, current list of cookies follows, as reported by Cookiebot:
Who else receives data
- Payment, email and hosting providers process data for us: Stripe for payments, and companies that send our emails and run our server and database.
- Google: reCAPTCHA, cloud storage (the images and videos on our pages, generated files and backups, so Google sees your IP address when they load) and, with your consent, Analytics.
- Cookiebot (Usercentrics, Denmark): your cookie choices.
- AI service providers: the text you submit to make a book is processed by them to produce text and images. They do not receive your email, your account or your payment details.
- YouTube (Google): one blog post has a YouTube video. It loads only if you allow the YouTube category; otherwise the post shows a link. When it loads, YouTube sees your IP address and may set cookies. That post's other video is played from our own storage.
- Buy Me a Coffee: if you allow the Statistics category, the support button is loaded from their servers and they see your IP address; otherwise nothing is loaded. The plain donation links contact them only if you click one.
We do not sell your data and we show no advertising on the site.
Where data is stored, and data sent outside the European Union
The generated files, the images and videos on our pages and the off-site database backups are stored in cloud storage provided by Google, in the European Union. The site's server and database also run in the European Union.
Some of the providers we use are based in, or process data in, the United States. When personal data leaves the EU, the GDPR requires a safeguard. The providers that store customer data for us are listed on the EU-US Data Privacy Framework register, which the GDPR recognises as one (we last checked the official register on 11 November 2026).
The legal grounds we rely on
Under the GDPR we need a ground for each use of personal data. Ours are:
- Providing what you ask for (contract): your account, making books and using our tools, payments, and running a game room.
- Your consent: marketing emails and the optional categories of cookies (statistics, YouTube and the support button). You can withdraw consent at any time: unsubscribe with the link in any email, and change your cookie choices with the links in the cookie list above.
- Our legitimate interests: keeping the site secure and free of abuse, finding and fixing faults, and counting how many people use our free books, games and downloads. We weigh these against your rights, and you can object.
- A legal obligation: keeping accounting records of payments.
Your rights
Depending on where you live, you may have the right to see the data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive a copy, and to withdraw a consent. To use any of these, or to ask us to delete your account and its data (including a game room), write to info@linguwhee.com from the address on the account. We keep one thing: if you were on our email list, we keep the address (no longer linked to an account) so that your unsubscribe is remembered. You may also complain to the Dutch data-protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority in your own country.
Children
The site is meant for adults. A game room has a seat for a child, who needs no account, and the adult may type the child's first name, which is optional; we recommend a nickname or no name. We do not knowingly collect data from children beyond what an adult chooses to type into the game.
Changes
If we change how we handle data we will update this page and the date at the top.