Privacy Policy
Last updated: 2026-05-05
Word of the Day (word-of-the-day.tbs-digital.com) is operated by TBS Digital, an independent studio in Bordeaux, France. This policy explains what data we collect when you visit the site, why we collect it, and what rights you have over it. We have written it in plain language because we think legal boilerplate that nobody reads defeats the purpose of a privacy policy.
1. What we collect
We collect two categories of data.
Server logs. Like every web server, our hosting infrastructure records standard request metadata when your browser fetches a page: your IP address, the URL you requested, your browser's user-agent string, the date and time of the request, and the HTTP status code of the response. These logs exist for security purposes (detecting abuse, rate-limiting malicious traffic) and are retained for up to 30 days before automatic deletion. We do not use them to build profiles of individual visitors.
Contact form submissions. If you use the contact form on contact.html, we store the name you provide, your email address if you supply one (it is optional), and your message. This data is stored in a private database hosted on our server. We use it only to read and respond to your message. We do not add you to any mailing list, and we do not share this data with third parties.
We do not collect any data from the word-browsing part of the site. Reading the word of the day, browsing the archive, or navigating by letter or theme generates no data that we store beyond the server log entries described above.
2. Cookies and Cloudflare
This site is delivered through Cloudflare's content delivery network. Cloudflare sets a security cookie named __cf_bm on your browser to distinguish between human visitors and automated bots. This cookie does not track you across other websites. It expires within 30 minutes of your last page view. Cloudflare's privacy practices are described at cloudflare.com/privacypolicy.
As of version 1 of this site, TBS Digital does not set any first-party cookies of its own. We do not use session cookies, preference cookies, or analytics cookies. If we introduce an analytics tool in a future version, we will update this policy before enabling it, and we will choose a tool that respects visitor privacy (no cross-site tracking, no fingerprinting, data stored in the EU).
3. Google AdSense
Word of the Day is supported by Google AdSense advertising. When AdSense is active, Google may set cookies and read device identifiers in your browser to serve ads that are relevant to your interests based on your browsing history across other sites. This is Google's standard advertising behaviour; it is governed by Google's own policies, not ours.
You can review and adjust how Google uses your data for advertising at policies.google.com/technologies/ads. If you are in the EU or UK, Google is required to ask for your consent before using your data for personalised advertising. You can opt out of personalised ads entirely at google.com/settings/ads.
Note: AdSense review is pending for this site. Ads may not yet be displayed depending on when you are reading this. Once AdSense goes live, this policy will be updated to confirm it.
4. Your rights (GDPR and CCPA)
If you are based in the European Union, the European Economic Area, the United Kingdom, or the state of California, you have specific legal rights over personal data that we hold about you.
Right to access. You can ask us what personal data we hold about you. In practice, this means your contact form submission if you sent one.
Right to correction. If any data we hold about you is inaccurate or incomplete, you can ask us to correct it.
Right to deletion. You can ask us to delete personal data we hold about you. We will do so within 30 days, unless we are legally required to retain it.
Right to object. You can object to our processing of your personal data. In practice, the only data we process is your contact form submission, which we process solely to respond to you.
CCPA. We do not sell personal data. We do not share personal data with third parties for their direct marketing purposes. California residents have the right to know what personal information we have collected about them and to request deletion. Use the contact form to exercise any of these rights.
To exercise any of the rights above, use our contact form. We respond within 30 days.
5. Children's privacy
This site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has sent us a contact form message, please use the contact form to let us know and we will delete it promptly.
6. Data transfers
Our server is located in the European Union (Hetzner data centre, Germany). Contact form submissions are stored there. Cloudflare operates a global network; your request may be processed by a Cloudflare edge node outside the EU before reaching our server. Google AdSense operates globally. If you are concerned about cross-border data transfers, you may wish to disable personalised advertising using the links in section 3 above.
7. Changes to this policy
If we make a material change to this policy — for example, because we add an analytics tool or change how we store contact data — we will update the "Last updated" date at the top of this page before the change takes effect. We will not retroactively change how we process data that was collected under a previous version of this policy without giving you a chance to object.
8. Contact
For privacy questions, data requests, or concerns, please use our contact form. We do not publish an email address for this site; the contact form is the correct channel.