logo

Privacy

Last updated: July 17, 2026

This Privacy Policy describes how WordByWord.io ("we", "us", "our") collects, uses, and protects your personal data when you use our website, browser extension, and services.

Data Controller

Data controller: Vladimir Dolnikov; Address: Ploßstr. 56 04347 Leipzig, Germany; VAT ID: DE453895900; Email: [email protected]

Data We Collect

  • Account data: email, password (hashed), preferred interface language, profile settings.
  • Usage data: actions within the app (e.g., creating collections, adding terms), device and browser information.
  • Content data: words, phrases, translations, examples you add to your collections.
  • Translation data: words and phrases you select for translation. Translation is also available without an account; such requests are linked to your IP address for rate limiting, not to any account.
  • Technical data: IP address, cookies, authentication tokens, error logs.
  • Voiceover data: text-to-speech requests (text snippets), chosen voice parameters.
  • Payment and billing data: limited payment identifiers, billing details, and transaction metadata processed by Stripe. We do not store full card numbers.

Sources of Data

  • Directly from you when you create an account, use the website or browser extension, or contact support.
  • Automatically from your device via cookies and similar technologies.
  • From third-party services we integrate with for authentication and infrastructure (e.g., Supabase).

How We Use Data

  • Provide and maintain the service, including authentication, collections, terms, translation, and voiceover features.
  • Improve safety, performance, and reliability; prevent fraud and abuse; debug issues.
  • Personalize your experience (language settings, preferences).
  • Communicate with you about updates, security, and support.
  • Process payments and manage subscriptions.

Legal Bases (EEA/UK)

  • Performance of a contract (providing the service).
  • Legitimate interests (service improvement, security, analytics).
  • Consent (cookies, certain marketing communications).

Cookies and Similar Technologies

We use cookies to remember your language, maintain sessions, and secure access. We also use analytics cookies and identifiers set by Google Analytics, Yandex Metrica, and PostHog to analyze usage and improve the service. You can disable analytics and other cookies in your browser settings or use tracker-blocking tools; disabling some cookies may impact functionality.

Sharing and Disclosure

  • We never sell your personal data to third parties.
  • Service providers (e.g., Supabase for authentication and infrastructure; hosting and CDN).
  • Analytics providers: Google Analytics, Yandex Metrica, and PostHog (product analytics) to analyze usage and improve the service.
  • Translation and voiceover providers: text you submit for translation is processed by Yandex Cloud Translate, and text-to-speech requests by Google Cloud Text-to-Speech, solely to provide these features.
  • Payment processing: Stripe. Your payment data (e.g., card information, name, email) is transferred directly to Stripe and processed under Stripe’s Privacy Policy. We do not store full card details on our servers.
  • Legal and compliance when required by law or to protect our rights.

International Transfers

We may process data in countries outside your own. Where applicable, we rely on appropriate safeguards such as standard contractual clauses to protect your data.

Data Retention

We retain personal data for as long as necessary to provide the service and for legitimate business or legal purposes. You can request deletion of your account and data as described below.

Your Rights

  • Access, correction, deletion, and portability of your personal data.
  • Object to or restrict processing in certain circumstances.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with a supervisory authority (if applicable).

To exercise rights, contact us at [email protected]. We may need to verify your identity.

Security

We implement reasonable organizational and technical measures to protect your data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Children

Our service is not intended for children under 13 (or the relevant age in your jurisdiction). We do not knowingly collect data from children under this age.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with an updated "Last updated" date.

Contact

Email us at [email protected]