Privacy Policy

Last updated: 15 June 2026

This Privacy Policy explains how Spellaroo ("we", "us") collects, uses and protects information when you use our spelling practice service. By using Spellaroo, you agree to the practices described here.

Information we collect

Account information: when you register, we collect a name, email address and a password (stored only in encrypted/hashed form).
Payment information: purchases are processed by our payment provider, Stripe. We do not store your full card details on our servers.
Practice progress: your scores and session history are saved to power your dashboard. Some progress is also stored locally in your browser.
Messages you send us: if you use the contact form, we receive the details you provide so we can reply.
Technical data: basic information such as your browser type and usage needed to run and secure the service.

How we use your information

To provide and improve the spelling practice service and your progress tracking.
To process payments and manage access to paid word lists.
To send account-related emails, such as welcome and password-reset messages.
To respond to your enquiries and provide support.
To keep the service secure and prevent abuse.

Children's privacy

Spellaroo is designed for primary-school children, used under the supervision of a parent or guardian. Accounts should be created and managed by a parent or guardian, who is responsible for their child's use of the service. We do not knowingly collect more personal information from a child than is necessary to provide the service. If you believe a child has provided us with information without parental consent, please contact us and we will remove it.

Cookies and local storage

We use cookies and your browser's local storage to keep you signed in, remember your settings, and save practice progress. You can clear these through your browser settings, though some features may stop working as expected.

Third-party services

We rely on trusted third parties to operate Spellaroo, including:

Stripe — payment processing.
Google reCAPTCHA — to protect forms from spam and abuse.
Email delivery providers — to send account and support emails.

These providers handle data under their own privacy policies.

Data security

We take reasonable steps to protect your information, including hashing passwords and using secure connections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

You may request access to, correction of, or deletion of your personal information. To make a request, contact us using the details below.

Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above when we do.