Privacy

Who is responsible

The controller under the GDPR is the operator named in the Legal notice. Contact: [email protected].

What we store

Nothing server-side that identifies you, except a message you choose to send through the contact form (see below). Your layout, settings, recent lookups and word lists are stored in your browser (localStorage and IndexedDB) and never sent to us. Clearing your browser data removes them. This storage is only what the functions you use need, so no consent is required for it (§ 25(2) no. 2 TDDDG). Krumeto sets no cookies.

Server logs

Our web server keeps standard access logs (requested URL, time, browser type, truncated IP address) for at most 7 days to detect abuse and errors (Art. 6(1)(f) GDPR, our legitimate interest in a secure site). They are not combined with other data.

Analytics

No analytics are enabled at the moment.

Requests to third parties

• When you press “Recorded” next to a pronunciation, the audio file is loaded from Wikimedia Commons (upload.wikimedia.org). Wikimedia's servers then see your IP address, under the Wikimedia privacy policy.
• If you enable the optional “Ask about this word in ChatGPT / Claude / Perplexity” link, choosing it opens that service in a new tab with the word in the address. Their privacy policies apply. This is off by default.

Hosting and Cloudflare

The site runs on a server of Oracle Cloud Infrastructure in Frankfurt, Germany. Requests pass through Cloudflare (Cloudflare, Inc., USA), which protects the site against attacks and delivers pages faster; to do so it processes connection data such as your IP address. Cloudflare is certified under the EU–US Data Privacy Framework. The legal basis is our legitimate interest in a secure and fast site (Art. 6(1)(f) GDPR).

Contact form

If you use the contact form, we receive your email address and message. They wait on our server for at most an hour and are then stored in the operator's private GitHub repository (GitHub, Inc., USA, certified under the EU–US Data Privacy Framework), from which we answer you by email. We delete them when your request is handled, at the latest after 12 months, or earlier on request. The legal basis is your request (Art. 6(1)(b) and (f) GDPR).

Advertising

There is no advertising on this site at the moment. If that changes, this section will describe it and a consent dialog will be shown where the law requires it.

The iPhone and Android apps

The Krumeto apps have no accounts, no analytics, no advertising and no tracking. The dictionary is built into the app and works offline. Your settings and word lists are stored only on your device and are removed when you delete the app; an export file is created only when you choose “Export”. The apps connect to the internet only to play a recorded pronunciation from Wikimedia Commons and to open links you choose in your browser. Apple (App Store) and Google (Google Play) process download and purchase data under their own privacy policies.

Your rights

Under the GDPR you may ask what data we hold about you (in practice: none beyond short-lived logs and messages you sent us), request its correction or deletion, object to processing, or complain to a supervisory authority. Contact: [email protected].

Changes

This page is dated 2026-10-05 (hosting, Cloudflare and the contact form added). Changes will be noted here.