← Home

Privacy Policy

Last updated: [date]

⚠️ Placeholder skeleton. GDPR-compliant content is a launch-blocker — draft with a reputable template + one lawyer skim (see documentation/Legal.md §3–§4). The sections below are the required outline, not final text.

Who we are (data controller)

[Entity + contact — mirror the Impressum.]

What we collect

Account data (email); the page photos you upload and the vocabulary extracted from them. [Enumerate precisely.]

Why, and on what legal basis

Performance of a contract (running the service). Separate consent for any extras (analytics, marketing email). [Detail per purpose.]

Retention

Uploaded page photos are deleted automatically after ~24 hours; only the extracted words + example sentences are kept. [Confirm + document.]

Subprocessors

[List providers + confirm no training on uploads — Google (OCR/translation), Cloudflare (storage/CDN), Supabase (database/auth).]

Your rights

Access, erasure (full account + data deletion), portability (export), rectification. [How to exercise them.]

Contact

[Data-protection contact — see the contact page.]