Privacy policy
Your documents stay on your device. Wordpad Online has no accounts, sets no cookies of its own and runs no analytics or ads.
Updated 11 October 2026
What stays on your device
What you type, paste or open is kept in the browser’s own database (IndexedDB) that belongs to this site: document titles and text, pictures, and the list of recently deleted documents (kept for 30 days). It is not sent to us or to anyone else. Files are opened and made on your device; nothing leaves your device.
A few small settings sit in localStorage: the light or dark theme (wo-theme), the paper size (wo-page), line numbers (wo-lines), the Markdown view (wo-md-view) the typewriter font (wo-mono) and whether this browser already has documents (wo-docs). The open note tabs, the last open document, the date of your last backup and whether the site has asked the browser to keep its storage are kept with the documents. Clearing the site data for wordpadonline.com in your browser removes all of it, documents included.
Cloudflare, which hosts the site
Cloudflare, Inc. hosts the files and sees the technical side of each request: your IP address, your browser’s name and version, the address asked for and the time. It handles this on behalf of the site’s operator, to deliver the pages and keep the site safe from attacks, which is the operator’s legitimate interest under Article 6(1)(f) GDPR. Cloudflare is based in the USA and certified under the EU–US Data Privacy Framework. It keeps security logs for a short time; the operator sees totals at most, never a list of your visits. What you write is never part of these requests.
Cloudflare also asks browsers for network error reports (the Report-To and NEL headers): if a page fails to load, your browser may tell Cloudflare that it failed and why, with the address and time but nothing from your documents.
The site’s operator
Wordpad Online is run by a private individual, its operator, who is responsible for this site under the EU and UK GDPR (the data controller). Contact: contact@wordpadonline.com.
If you email
A message you send is used to answer you and kept only as long as the conversation needs it.
What you can ask for
Under EU and UK law you can ask for a copy of anything we hold about you, have it corrected or erased, or complain to a supervisory authority. In practice the only personal data we could hold is an email you sent; your documents are never ours to hand over or delete. Write to contact@wordpadonline.com.
Analytics and ads
There is no visitor tracking and no advertising on Wordpad Online today. Should that ever change, this policy will name the service and list what it collects before it goes live.