Privacy Policy

This policy explains how worloom handles personal information when you browse worloom.com, try a lesson, create an account or use our vocabulary learning tools. It covers this website and the services that keep your account and learning progress working.

Service operator

Denis Dmitrievich Vasenkov

Self-employed

Tax registration number (UNP)

CE5889757

Postal address

Vitebsk Region, Novopolotsk, Molodezhnaya Street, 186, building 4, apartment 46

Contact worloom: webvasenkov@gmail.com.

• Account details. Your email address, optional name, account identifier and sign-in records. If you use a password, we store a one-way password hash, rather than the password itself.
• Google sign-in. If you choose Google, we receive your Google account identifier, verified email address and profile name. We do not request access to your Gmail messages or contacts. Older accounts may still have a previously connected Telegram identifier.
• Learning activity. When you are signed in, we save your word sets, folder names, answers, lesson drafts, hints, practice history, review schedule and preferences such as your daily goal and time zone. We use these to save progress and arrange future practice.
• Technical and security information. Session identifiers, verification requests and request information needed to serve and protect the website. Our infrastructure receives your IP address; the application uses a protected hash for rate limiting.
• Messages you send us. If you use our contact form, we receive your email address, optional name, chosen topic, message and any file you attach. If you email us, we receive the information included in your email.

If you choose an avatar, we store your selected preset or a resized version of the image you upload. You can change or remove it in your account.

To suggest a language on your first visit to the homepage, we may look up your approximate country from your IP address using a database on our server. This lookup does not send your IP address to an external geolocation service or request your precise location.

The vocabulary level check runs in your browser. Its answers and suggested level are not saved to your account.

We use account and learning information to provide the service you request: create and secure your account, deliver verification and password-reset emails, synchronise your words across devices, calculate review dates and respond to support requests. Without the necessary account details, we cannot provide account-based features.

We also use limited account and activity information to understand how the service is used, troubleshoot problems and prevent misuse. Authorised administrators can review account details and learning activity summaries for these purposes.

Where the GDPR applies, providing your account and learning tools is based on performing our agreement with you. Security, maintenance and support rely on our legitimate interests in operating a reliable service, balanced against your rights. We may also process information to meet a legal obligation. Where we ask for consent for an optional use, you can withdraw it without affecting earlier lawful processing.

Review dates and vocabulary suggestions are calculated automatically to support practice. They do not make decisions with legal or similarly significant effects about you.

We use an essential first-party cookie to keep you signed in and protect account verification. A sign-in session lasts up to 30 days unless it is ended earlier. Verification codes and sign-in confirmation requests have shorter validity periods. Blocking essential cookies may prevent these features from working.

We remember your language in a first-party preference cookie for up to one year and in browser storage. Your theme preference is also stored in your browser. You can change these settings using the language and theme controls.

An unfinished lesson taken without an account is stored temporarily in this tab’s session storage, including your position, hints and checked answers. You can resume it after reloading or returning in the same tab. Unchecked answer drafts are not retained. This temporary lesson is removed when you complete it or sign in, and replaced when you start a new lesson. It does not sync across devices or transfer to your account.

Your browser stores account-specific progress caches and changes waiting to synchronise; signing out does not remove all previously stored learning data from that device.

Older guest progress saved by earlier versions may still be stored in your browser. It is transferred automatically when you create a new account. Local transfer backups may remain on your device. Current lessons taken without an account are not included in these transfers.

You can clear cookies and website data in your browser settings. Download or synchronise any saved progress you want to keep first: clearing storage can permanently remove older guest records and unsent account changes, and does not delete data already saved to your account.

The current website does not use advertising cookies or third-party analytics trackers. Its fonts and vocabulary illustrations are served by worloom.

• Hosting and email. Our deployment uses HostVDS hosting in Paris, France, and Brevo for account verification and password-reset emails. These providers process information needed to host the service or deliver the email.
• Contact form. Contact form submissions and attachments are delivered to our support channel through a Telegram bot. Telegram processes this information to deliver and store the correspondence. Your IP address is not included in the message we send to Telegram.
• Sign-in providers. Choosing Google takes you to Google to authenticate. Google handles that interaction under its own privacy policy. Legacy Telegram account verification, where available, similarly uses Telegram.
• Pronunciation. When you play a word, your browser or device may use a speech service. Some voices run locally; others may send the word to the browser or operating-system provider. worloom does not request microphone access for pronunciation.
• Word-set links. Creating and sharing a link makes the set title and selected words available to signed-in people with the link. It does not share your email address or learning history. Deleting the original set disables its link, but copies others have already saved can remain.

We do not sell your personal information or use it for targeted advertising. Information may also be disclosed when required by law or when necessary to address fraud, security incidents or legal claims.

A provider you choose may process information outside your country. Its privacy notice explains its locations and safeguards. Where applicable law requires safeguards for transfers we arrange, those requirements apply. You can contact us for information about the providers and transfers relevant to your account.

Account details and learning history are stored so you can return to your words over time. They are not automatically erased when you sign out or stop practising. To request removal of your account and associated data, contact us using the details below.

Contact form messages and files pass through our server to Telegram without being saved as message content or files in our application database. We keep a delivery reference, protected content fingerprint, delivery status and Telegram message identifiers to prevent duplicate sends. These technical records are eligible for cleanup after seven days. The correspondence delivered to Telegram remains until it is deleted separately; contact us to request its removal.

Session and verification expiry ends access or code validity; it does not necessarily erase the related record immediately. Security records, support correspondence and backup copies may remain separately from your active account. Retention depends on their purpose, security needs and applicable legal requirements. Contact us for details about a particular record or deletion request.

We protect information with measures including HTTPS, hashed passwords and restricted account access. No online service or storage method can guarantee absolute security. Keep your sign-in details private and take care when using a shared device.

In Your account, you can edit your name, manage connected sign-in methods, end sessions and select “Download my data” to export saved learning progress and available device transfer data. This download is not a complete copy of every account or security record.

You can contact us to request access to other personal information, correction or deletion. Depending on the law that applies, you may also have rights to a portable copy, restriction of processing and objection to processing based on legitimate interests. We may need to verify your identity before acting on a request.

There is currently no self-service account deletion button. To request deletion, contact us. Removing cookies or disconnecting Google does not delete your worloom account. Copies of word sets saved by other users may remain after a deletion request.

If the GDPR applies, you can complain to a data protection authority, including the authority where you live, work or believe your rights were infringed. You do not have to contact us first to exercise that right.

If a learner needs a parent’s or guardian’s permission under applicable law, that permission is required before they provide personal information. If you believe a child has given us information without the required permission, contact us so we can review and address it.

We may update this policy as the service or its data practices change. The date at the top identifies the latest version. If a change requires a separate notice or your consent under applicable law, we will provide that notice or request consent.

For privacy questions or a data request, use the contact below. Include enough information to identify your account, but never send your password or a verification code.

Contact worloom: webvasenkov@gmail.com.

For the rules for using the service, read our Terms of Use.