Privacy Policy
Last updated: April 2026
1. Who we are
waffled is operated by SaaSquatch Ltd, a company registered in England and Wales. You can reach us about privacy matters at privacy@waffled.co.uk.
2. What we collect
If you create an account, we store your email address and a bcrypt hash of your password. That's it. We do not collect your name, address, phone number, or any other personal information unless you voluntarily send it to us (e.g. in a support email).
For logged-in users, we also store basic usage statistics: word counts, tone selection, waffle scores, and timestamps. We do not store the actual text you paste into the tool.
3. What we don't store
The text you submit to the de-waffle tool is sent to our AI provider for processing, and the result is returned to you. The original and de-waffled text are not saved to our database. The AI provider may temporarily log requests for abuse prevention, governed by their own privacy policy.
4. Cookies
We use a single HTTP-only session cookie (waffled_token) to keep you logged in. It contains a signed JWT with your user ID and email. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
We use Umami Analytics, a privacy-first tool that does not use cookies or track personal data. It only records anonymous page views.
5. Third parties
We share minimal data with the following providers, strictly as needed to run the service:
- Vercel — hosting and database
- OpenRouter and Google (Gemini) — AI text processing
- PayPal — payment processing (when you buy credits)
6. Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data. Email us at privacy@waffled.co.uk and we'll action any request within 30 days.
7. Changes
We'll update this page if anything material changes and notify registered users by email for significant updates.