Privacy Policy

Who is responsible

The controller for the personal data described here is:

Oleksandr Borzov, Auweg 10, 85748 Garching b. München, Germany

logosmachinebot@gmail.com

What the website stores about you

• An account identifier from the provider you signed in with: your Google account id, or your Telegram user id.
• Your name, and for Google sign-in your email address, as the provider passes them on.
• Your interface language and your chosen native and learning languages.
• The vocabulary itself: your words and phrases, their translations, examples and synonyms, the folders you file them in, and your progress on each word — interval, easiness, last and next review.
• Nothing else. There is no analytics, no advertising and no profiling.

Where it runs, and who else sees it

The website is hosted on Vercel (Vercel Inc., USA). Vercel serves the pages and runs the server functions, and its infrastructure logs technical request data, including your IP address, for a limited period.

The pages themselves hold no vocabulary. They ask an API that runs on our own hardware in Germany and is reachable through a Cloudflare tunnel (Cloudflare, Inc.), which handles request metadata in transit. The database is MongoDB Atlas.

Signing in with Google uses Google's OAuth. Signing in with Telegram uses Telegram's login widget, loaded from telegram.org. Text you send for translation, examples or a sentence check goes to Google Gemini. Each of these providers has its own privacy policy.

Cookies and local storage

Only what the site needs in order to work:

• A session cookie, set when you sign in, valid for 60 days.
• NEXT_LOCALE, which remembers the interface language for a year.
• The chosen theme, in your browser's local storage.
• A service-worker cache, so the installed app still opens without a connection.

Why there is no cookie banner

Every item above is strictly necessary for something you asked for: staying signed in, keeping your language, opening offline. None of them profiles you or follows you to other sites, so there is nothing to ask your consent for, and we do not ask.

Legal bases

• Performing the contract you enter into by using the service (Art. 6(1)(b) GDPR): your account, your vocabulary, your progress.
• Consent (Art. 6(1)(a)): connecting a Telegram account, and sending text to Gemini when you ask for a translation or a check. You can withdraw it by deleting your data.
• Legitimate interests (Art. 6(1)(f)): keeping the service running, fixing errors, and defending it against abuse.

How long it is kept

Your account and your vocabulary stay until you delete them. Deletion is immediate and irreversible: send /deletemydata to the bot, or write to us. Technical logs at Vercel and Cloudflare expire on their own schedules, in weeks rather than years.

Your rights

Under the GDPR you may ask for access to your data, for correction, for erasure, for restriction of processing and for a portable copy, and you may object to processing based on legitimate interests. You may withdraw consent at any time, and you may complain to a supervisory authority — for us that is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) in Ansbach.

How to exercise them

The quickest route is the bot itself: /mydata returns a machine-readable copy of everything stored about you, and /deletemydata erases it. Anything else — corrections, questions, complaints — goes to logosmachinebot@gmail.com and is answered within one month.

Transfers outside the EU

Vercel, Cloudflare, Google and Telegram may process data on servers outside the European Economic Area. Those transfers rely on the European Commission's Standard Contractual Clauses or on an adequacy decision, as set out in each provider's own terms.

Children

The service is not meant for children under 16, and we do not knowingly hold data about them. If you believe we do, write to us and it will be deleted.

Changes

If this policy changes in a way that matters, the date above changes with it, and where the change is significant the bot will say so in a message.