Privacy

Who is responsible

Pablo Quiroga Otero (tax ID 45148907E, Rúa Vila Real 15, Ourense) is responsible for your data in Field Words. For anything about it, write to [email protected].

The essentials

• Reading a page sends nothing anywhere. We only send something when you press Understand or Catch, or use your account.
• Your catches and reviews are kept on your device. They only reach our servers if you turn on sync in your account.
• The AI only receives the word and its sentence, never the page's address or title.
• Found again marks the words you've already caught when they turn up on a page. That search happens in your browser and sends nothing anywhere, but the page's own scripts can read those marks, so a website could tell which of its words you've caught. You can turn it off in settings.
• We use no cookies, advertising or analytics.

What data we handle, and why

• The word or expression you choose, its sentence and your question, if you ask one: to answer you. They pass through our server to the AI, and we don't keep them.
• An anonymous identifier and how many AI requests you've made: to apply your plan's limits. It's created the first time you press Understand or Catch.
• Your email and, if you sign in with Google, the basic profile details Google shares (name and picture): for your account. We ask Google for nothing more.
• Your IP address: our providers handle it to deliver the service and protect it from abuse.
• If you buy Premium, your subscription's status: to know which plan you have.
• If you turn on sync: your catches, with their sentence, your notes and the page you found them on (title and address, without parameters), your reviews and your visual answers. To have them on your other devices.

Why we may handle it

To provide the service you ask for and manage your account and subscription, because it's necessary for the contract (GDPR article 6.1.b). To apply limits and prevent abuse, because of our legitimate interest in keeping the service running (article 6.1.f).

Who we share it with

Only those who help us provide the service, who handle it on our instructions:

• Anthropic (United States), which generates the AI answers. It doesn't use this data to train its models and deletes requests within 30 days, except those flagged for breaking its usage policy, which it may keep for up to 2 years.
• Supabase, which hosts accounts, counts and what you sync in the European Union.
• Cloudflare, which connections pass through and which hosts this website.
• Resend (United States), which sends the emails with your sign-in code.
• Polar (United States), if you buy Premium: it sells the subscription and, with Stripe, handles your name, email, country and payment. We never see your card details. It keeps its sales records as tax law requires, including after you delete your account.
• Google, only if you choose to sign in with Google.

Transfers outside the EU

Some of these providers are in the United States or may handle data there. Those transfers are protected by the standard contractual clauses approved by the European Commission.

How long we keep it

• The anonymous identifier is deleted after 30 days, and usage counts after 40.
• What you've synced is kept until you delete your account. Turning sync off doesn't remove it from the server.
• We make backups of the database and delete each one after 30 days, so what you delete is gone from them within that time too.
• Your account is kept until you delete it.
• What's on your device stays there until you delete it.

Your rights

You can access, correct, delete or take your data, object to its handling or restrict it. You can export your data and delete your account yourself from your profile. For the rest, write to [email protected]. If you think we're not handling it properly, you can complain to Spain's data protection authority (aepd.es).

Minimum age

Field Words is for people aged 14 and over.

Changes

If this policy changes in an important way, we'll say so here and in the app before it applies.