Privacy policy

1. Who we are

The controller of your personal data is Gytis Baltasevičius, a private person in Lithuania, who runs PolyglotWolfas. Contact: gytis@smaragdinas.com.

2. What data we store

• Your account: your email address and a one-way hash of your password (never the password itself), and the sign-in tokens issued to you.
• Your settings, for example your native language and your daily limits.
• Your words and chunks: each word, the sentence it came from, and the address of the web page you saved it from.
• Photos you upload, and the words found in them.
• Your practice: your answers and the review plan for each word.
• Your conversations with the AI, as text. Voice recordings are not stored: they are passed on for transcription and then dropped. We store only how much speech you used each day.
• Translations made for you, kept so the same word is not translated twice.
• Usage counters: how many paid calls you made each day, so the daily limits work.
• Failed sign-in attempts: the IP address and the email address that was typed, to stop password guessing.

3. Why we use it

We use your data to provide the service you asked for, under our agreement with you (GDPR Article 6(1)(b)). We use failed sign-in attempts and error reports to keep the service safe and working, which is our legitimate interest (GDPR Article 6(1)(f)).

4. Who we share it with

• Anthropic (USA): the words and sentences to translate, and your conversation text, to produce translations, replies and feedback.
• ElevenLabs (USA): your voice recording, to turn it into text, and the reply text, to read it out loud.
• Google Cloud: hosting, the database and your photo files, in Finland (region europe-north1). Text recognition in photos uses Google Cloud Vision, which may process the photo outside the EU.
• Sentry (USA): error reports, with technical details of a failure. They do not include your email address or what you typed.
• Free Dictionary API: only the word you look up, with no data about you.

A transfer to the USA is covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses. We never sell your data.

5. The browser extension

The extension saves a word only when you select text and press Enter. It then sends the selected text, the sentence around it and the page address to your PolyglotWolfas account.

It can also mark the words you saved before when you open a page again. For that it keeps a list of the pages you saved words from, inside your browser. It compares each page you open with that list, and asks our server only about a page that is on it. You can turn the marks off in the side panel. The extension does not send us the pages you visit and does not track your browsing.

6. How long we keep it

• Your account data: until you delete it, or until your account is deleted.
• Photo files: deleted together with the photo, the chunk or the account.
• Database backups: 7 days.
• Server logs: 30 days.
• Error reports in Sentry: 30 days.
• Failed sign-in attempts: removed once the 30-minute lock period is over, at the next failed sign-in on the service. Until that happens, a row can stay longer.

7. Cookies

These public pages set no cookies. The web app sets one sign-in cookie, which is strictly necessary to keep you signed in (ePrivacy Directive, Article 5(3)), so it needs no consent. We use no analytics and no advertising cookies.

8. Your rights

You have the right to see your data, correct it, delete it, receive a copy of it, and object to how we use it. To use a right, or to delete your account, write to gytis@smaragdinas.com from the email address of your account. We answer within one month (GDPR Article 12(3)). You can also complain to the State Data Protection Inspectorate of Lithuania (VDAI), vdai.lrv.lt.

9. Age

You must be 16 or older to use the service.

10. Changes

When we change this policy, we publish the new version on this page with a new version number and date. For an important change we also tell you by email before it takes effect.