Privacy policy

Working text and accounts

LinguaTools does not require accounts. In local processing modes, working text is held in page memory and is not sent to a provider or saved by default. Closing or reloading the page normally ends that working session. This is not a guarantee against browser recovery features, extensions, shared-device access or copies you make outside the site.

Optional device storage and deletion

Vocabulary lists and flashcard decks are saved to this browser profile in localStorage only when you explicitly choose to save. Quiz results can also be saved locally with your permission. A saved snapshot may be restored on a later visit; subsequent edits are not saved automatically. There is no account sync or server backup. Theme settings persist in localStorage; an analytics consent choice may also be stored there when that service is configured.

Saved device data remains until you remove it or your browser clears it. Use the relevant tool control labeled “Clear saved data,” or clear this site in your browser storage settings. Clearing a session is not the same as deleting a saved snapshot. Deleting saved data may leave the current session unchanged, so clear that separately or close the page. Export important lists first; exports and downloads must be deleted separately. The site does not encrypt device storage, and private browsing or storage quotas may prevent saving.

Optional text providers and dictionary lookups

If you choose AI processing, configured LanguageTool checks or translation and give consent, the submitted text travels through the site server to the selected provider. The site processes that request in memory and does not log prompts in application code. Provider retention, security and use of submitted data depend on the provider and the operator agreement; this policy does not promise deletion by a third party. Avoid sending sensitive information and review provider setup details first.

Dictionary lookup sends the requested English word, not a full passage, through the server to the Free Dictionary API by default, or to an operator-configured alternative. That provider sees the site server IP address and request metadata. The lookup also reaches our hosting infrastructure, which can see your connection metadata. Definitions, examples and phonetic text may be unavailable; dictionary audio is not automatically loaded by the lookup tool.

Speech and microphone permission

Text to speech uses browser speech synthesis and available device voices. Some voices may send text to a cloud service; voice availability does not guarantee offline processing. Listening and pronunciation playback share this limitation. Speech recognition requires explicit consent before starting and browser microphone permission. Audio may be processed by the browser vendor rather than exclusively on your device.

The site does not save recordings or offer an audio archive. Recognition transcripts remain working text unless you copy or export them or deliberately send them to another tool or service. Stop the microphone when finished. Typing is available when recognition is unsupported or you do not want audio processing.

API limits, hosting logs and retention

API requests use a bounded, in-memory rate limiter containing request counts, expiry times and, only when trusted-proxy handling is enabled, an IP-based key. These buckets are process-local, expire after the rate window and disappear on restart; they are not stored prompt histories. The limiter cannot enforce a single quota across a distributed deployment without additional platform controls.

This deployment uses Vercel to host the website and server API routes. Cloudflare manages authoritative DNS; the LinguaTools subdomain is DNS-only, so Cloudflare does not proxy its website traffic. Vercel and network providers may retain access and security logs containing IP addresses, requested URLs, timestamps, status codes and other metadata. A dictionary word may appear in its request URL. Hosting-log retention is controlled by the deployment operator and host, not by browser storage controls. The operator must confirm and disclose the applicable hosting and provider retention arrangements; no universal retention period is asserted here.

Optional analytics and consent settings

Analytics is disabled by default. Only Google Analytics, configured with NEXT_PUBLIC_GA_MEASUREMENT_ID, or Plausible, configured with NEXT_PUBLIC_PLAUSIBLE_DOMAIN, is supported as optional analytics. Neither loads until you accept analytics. Application reporting is limited to page paths and tool-completion events, not entered text, prompts, vocabulary lists or audio. Analytics providers can still receive ordinary network metadata; Google Analytics may set cookies. Do not put sensitive information in URLs.

When analytics is configured, the site consent controls on this privacy page include “Reset analytics consent.” Resetting reloads the page and stops loading analytics until you choose again. Previously set provider cookies may remain; remove them in browser settings if desired. When no analytics service is configured, there is no analytics script or reset control to display.

Advertising is not automatically enabled

Advertising areas only reserve layout space. No real advertising scripts are automatically inserted, and setting a publisher identifier alone does not load advertisements. A publisher must manually configure a valid integration, review network policies and provide applicable region-specific consent before enabling advertising. Any such launch requires updated disclosures of the actual providers and data practices; reserved containers do not imply approval or certification.

Privacy contact and operator responsibility

For privacy questions or requests, email khadkayamraj2002@gmail.com. Do not include passwords, API keys, confidential passages or unnecessary personal information.

The deployment operator is responsible for publishing accurate identity, hosting and legal information, keeping this policy aligned with configuration and obtaining an appropriate legal review. This page makes no claim of privacy certification or compliance approval.