WORDPIN

# Website privacy

Canonical: https://wordpin.app/privacy/

## About this website

This policy covers wordpin.app and its public interactive sample. The sample uses supplied illustrative images and runs in your browser. It does not accept personal photo uploads, send a photo to an AI provider, or connect to your iPhone collection.

## Basic traffic counts

We use first-party server-side counters to understand public page requests, entry sources, coarse country codes and App Store link redirects. We aggregate these by UTC day and public page without creating a visitor ID or recording IP addresses, user-agent strings, full referrer URLs or arbitrary query parameters. The counters do not reconstruct individual journeys or join to app accounts, purchases or optional analytics sessions. Refreshes count again; these are request counts and entry estimates, not verified people.

This limited measurement supports our legitimate interest in improving public information and discovering whether search and AI services lead readers here. It does not place analytics cookies or access browser storage. You can disable all analytics in the footer preferences; a non-identifying preference cookie remembers that choice for 90 days and takes effect on subsequent requests. GPC and DNT request signals also stop measurement. Infrastructure still processes connection information to deliver and secure requests.

Known automated and QA requests are excluded from visitor counters. Search and AI crawler requests are counted separately by declared agent; an unverified agent name is not proof of that platform or a citation. Data begins with this implementation, without historical backfill. Aggregate counters expire within 90 days.

## Optional interaction analytics

Optional interaction analytics starts only when you explicitly allow it in the footer preferences. No consent banner blocks your first visit. We record page views, language selection, public sample interactions, article engagement and App Store link clicks. Events include a random session identifier stored in sessionStorage, the public page path, the interface language and a coarse source category such as Google, ChatGPT, YouTube or direct. Only recognised campaign labels are accepted.

We do not put photos, vocabulary, email addresses, full referrer URLs, query strings, payment details, full IP addresses or browser fingerprints into these events. The analytics service is hosted on Cloudflare Workers and Durable Objects. Network infrastructure necessarily processes connection information to deliver the website and protect it from abuse.

Website events are retained for up to 90 days, then automatically deleted. We store your choice in localStorage until you change it or clear website storage. The session identifier lasts for the browser tab’s session until your analytics preference changes. A local preference revision helps restored pages discard older analytics caches; it is not sent in events. Select “Analytics preferences” in the footer to decline later; this stops new events and removes the session identifier. Global Privacy Control and Do Not Track also prevent events.

## Scope of measurement

A download-link click is not a confirmed install or purchase. We do not join website session identifiers to App Store transactions or iPhone identities. Reports describe website activity separately from application and payment activity. Automated traffic or blocked measurement may affect these counts.

## External links and the iPhone app

The App Store and other linked services apply their own policies. Read the [iPhone app privacy policy](https://lexi.zeta.lol/privacy.html?lang=en) before using new photo recognition. Payments for a future Pro subscription will be handled in the iPhone app through Apple; this website does not collect payment instruments.

## Contact

For privacy and support requests, use [WordPin support](https://lexi.zeta.lol/support.html?lang=en). Do not include sensitive photos or payment credentials in a request.