Privacy Policy

What we collect

The image you upload and the text we extract from it, for as long as it takes to produce your translation. A session cookie that identifies your browser so you can see your own translations and no one else can. Aggregate usage data — how many pages were processed, how long they took, and what they cost us to run.

We do not require an account, and we do not ask for your name, address or payment details.

How long we keep it

Your uploaded page, the translated image, and all extracted and translated text are deleted 24 hours after upload. This is counted from a successful upload and is not extended by producing a result. Deletion runs hourly, so the physical removal happens within one hour of expiry. You can also delete a translation yourself at any time after it finishes.

Aggregate usage records and quality feedback are kept, but they contain no image content and no extracted text.

Who else sees your image

To produce a translation we send your page to third-party services. Only the first two below ever receive the image itself; the rest are listed because they carry or store data on our behalf.

• OpenRouter (company based in the United States) — the gateway we send the page to. It forwards the request to the model provider below. We have not enabled prompt logging, and we have not granted OpenRouter permission to use our traffic to improve its own product.
• Google (company based in the United States) — runs the model (gemini-4-argon) that reads and translates the page. It is reached through OpenRouter, so Google's terms for that route apply rather than a direct agreement with us. We have switched off permission for paid endpoints to train on our requests, so your page is not used as training data on this route.
• Supabase (database and file storage, hosted on AWS in Canada) — stores your uploaded page, the translated image and the extracted text until the 24-hour deletion described above.
• DigitalOcean (United States) — the server that runs the translation. Images pass through it in memory and are not kept there.
• Cloudflare (United States) — handles DNS and TLS, so all traffic passes through it in transit.
• Upstash (Redis) — rate limiting only. It holds a rotating hashed identifier, never your image or text.

We do not currently require zero-retention routing. Not being used for training is not the same as not being stored: a model provider may, under its own policy, keep the page for a period after processing it. We also do not restrict which country the translation runs in, so processing may happen outside the country the provider is based in. If either matters to you, do not upload the page.

We cannot promise that a third party deletes your data when we delete ours. Our 24-hour rule governs our own storage. Each provider's own policy governs theirs.

Cookies and analytics

We use one cookie: the session cookie described above. It is required for the service to work and is not used for advertising or cross-site tracking.

For traffic statistics we use a privacy-friendly analytics tool that sets no cookies and collects no personal data. We do not use Google Analytics.

Your rights

Because we hold no account and delete content within 24 hours, most requests resolve themselves. If you need something removed sooner, use the delete button on your translation, or email [email protected].

If you gave us your email address to hear about future plans, you can ask us to delete it at the same address.