Privacy Policy

1. Who We Are

LingoPeek is operated by Zanforge LTD, a company registered in Cyprus (“we”, “us”, or “our”). This policy explains what personal data we collect when you use LingoPeek, how we use it, and your rights under the General Data Protection Regulation (GDPR).

Contact: [email protected]

2. Data We Collect

We collect only what is necessary to provide the service:

• Account information — your email address and display name, received from your OAuth provider (Google or GitHub) when you sign in. We do not receive or store your OAuth password.
• Words and translations — words you look up and their cached translations, linked to your account so you can save and review them later.
• Saved word lists — words you explicitly save to your personal vocabulary list.
• Usage data — request counts used for rate limiting and abuse prevention. We do not build behavioural profiles or use this data for advertising.

We do not collect payment information, location data, or device identifiers beyond what your browser sends in standard HTTP requests.

3. Legal Basis and Purpose

• Performance of a contract (Art. 6(1)(b) GDPR) — processing your account details and word lists is necessary to provide the service you signed up for.
• Legitimate interests (Art. 6(1)(f) GDPR) — rate-limit counters and abuse-prevention data are processed to protect the integrity of the service.

We do not sell your data. We do not use it for advertising or profiling.

4. Data Processors

We use the following sub-processors to operate the service. Each is bound by a data processing agreement and appropriate safeguards:

• Railway — application hosting and PostgreSQL database (United States). Standard Contractual Clauses apply.
• OpenRouter — LLM API used to generate translations (United States). Only the word or text you look up is sent; no account identifiers are transmitted. Standard Contractual Clauses apply.

No other third parties receive your personal data.

5. Retention

• Account and word-list data — kept for as long as your account is active. You can delete your account at any time, which permanently removes your data.
• Translation cache — entries are purged automatically on a rolling basis. The cache stores text and its translation; it is not linked to individual accounts.
• Rate-limit counters — purged automatically after expiry (typically 24 hours).

6. Your GDPR Rights

If you are in the European Economic Area or United Kingdom, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Erasure — request deletion of your personal data.
• Portability — receive your data in a machine-readable format.
• Restriction — ask us to limit how we process your data in certain circumstances.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Cookies

We use a single session cookie to keep you signed in. No advertising, tracking, or analytics cookies are set. The session cookie is strictly necessary for the service to function and does not require separate consent under GDPR.

8. Changes to This Policy

If we make material changes to this policy, we will notify you via a notice inside the application. Continued use of LingoPeek after the effective date constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions or requests, contact us at: [email protected]

Zanforge LTD
Cyprus