Privacy

This is a translation. The German version is the authoritative one.

The short version

No account, no advertising, no analytics service, no tracking, and nothing loaded from any other company. We keep no record of who looked up what. All we count is how many searches there are each day, as plain totals (see below).

What the web server logs technically is set out below. It includes the addresses requested — and a search or a word page carries the word in its address, so those words are in the log like any other URL.

Server log files

Like every web server, ours records each request. Specifically: date and time, the server’s IP address and the address of whoever made the request as recorded in the IIS log — as a rule a Cloudflare server rather than your own connection, because the site is delivered through their network — the HTTP method, the address requested including any parameters, the server port, an authenticated user name where one exists (on this site there is none), the browser’s description of itself, the referring page, the status of the response, the amount of data transferred in each direction, how long the request took, and, for a search, how many entries it found.

This is needed to operate the site and to investigate faults and attacks, which is a legitimate interest under Article 6(1)(f) GDPR.

They are deleted after 14 days. Long enough to investigate a fault or an attack, and no longer than that, which is what Article 5(1)(e) GDPR asks for.

We use STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, for hosting. Where STRATO processes personal data on our behalf, it does so under a data processing agreement as required by Article 28 GDPR.

The site is delivered through Cloudflare: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Every request reaches our server through their network, and your IP address is processed there. This protects the site against overload and attacks, which is a legitimate interest under Article 6(1)(f) GDPR. Where Cloudflare processes personal data on our behalf, it does so under their data processing addendum, which forms part of the subscription agreement and carries the European Commission's standard contractual clauses for the transfer to the United States.

The records are not combined with anything else and are not used to build a profile.

Search statistics

The site counts how many searches are made each day and how many of them found nothing. Only these two numbers are stored, one pair per day: no search term, no IP address, no time of day, no browser details — nothing that relates to a person, a device or a query.

They are anonymous totals and therefore not personal data. We keep them to see how much the dictionary is used and how often it cannot help, and they are kept without a time limit because they say nothing about anyone.

The language cookie

Choosing a language in the footer stores that choice in a cookie so the site can honour it next time. It holds a language code and nothing else — no identifier, nothing that distinguishes you from anyone else who reads the same language.

It is strictly necessary for a function you asked for, so it needs no consent under Section 25(2) No. 2 TDDDG. The site sets no other cookie. No consent is required for the cookies and local storage this site uses, which is why it has no cookie banner.

Recent lookups and letterform

The list of words you looked up recently is kept in your own browser, in local storage. So is one setting, if you choose the loopless Thai letterform in the footer. Both are necessary for the function you chose to use and therefore need no consent under Section 25(2) No. 2 TDDDG either.

What is stored locally is not transmitted to our server and we cannot see it. The word you are looking up at this moment does reach the server, because that is how the lookup happens. Clearing your browser’s site data removes both.

Your rights

Subject to the statutory conditions you have in particular the rights to information, correction, erasure and restriction of processing. Where processing rests on Article 6(1)(f) GDPR, you may object under the conditions of Article 21 GDPR.

You may also complain to a data protection supervisory authority; the one responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (ldi.nrw.de).

Apart from the technically necessary server log data, we store no personal data about your use of this dictionary.

Contact