Privacy Policy
This Privacy Policy explains how Low's Translator ("the Service", "we", "us", "our") collects, uses, and protects your personal data when you use our Discord application and our website at https://translate.lowe.lol.
The Service is operated by Lowe Garmark, an individual based in Sweden (the "Operator"). For the purposes of the EU General Data Protection Regulation (GDPR), the Operator is the data controller of your personal data. To exercise your rights or ask a question, contact [email protected].
1. The data we collect
- Discord account identifiers — your Discord user ID, username, and avatar via Discord OAuth2 (
identify). If you set up channel auto-translation, we also read the servers you manage (guilds) and the relevant server/channel IDs. - Preferences — your chosen target language and formality setting.
- Usage data — characters translated per day and month, your plan, and any extra-character balance.
- Translation history — for your own convenience, your most recent translations (the original text, the translated text, the languages, and the engine) are saved to your personal dashboard history, capped in length and to a limited number of recent entries. Only translations you request are saved (not other people's messages or channel auto-translation). You can erase it anytime from the dashboard ("Clear history") or via account deletion; it's included in your data export.
- Referrals — if you sign up through someone's referral link, we store the link between the two accounts so we can grant the bonus characters. You can see how many people you've referred on your dashboard.
- Optional contact email — an email you may provide in the dashboard for notifications, given with your consent.
- Billing data — Stripe customer/subscription IDs and a purchase record (amount, currency, date). We never receive or store your card details; these are handled entirely by Stripe.
- Support tickets — the subject, category, messages, and any images you upload. If you use the "Report translation" command, the report you submit (your description, and the original and translated text plus their languages) is stored as a support ticket so we can investigate.
- Auto-translation configuration — for channels you enable: the server ID, channel ID, and target language(s).
- Technical data — a login session cookie and standard server logs (e.g. IP address, timestamps) for security and operation.
- Analytics data (with your consent only) — if you accept the cookie banner, we set a single first-party analytics cookie (a random visitor ID) and record the pages you view, buttons you click, the domain that referred you, and your country. The country is derived from your IP address using an offline geolocation database on our own server; the IP is used only momentarily to look up the country and only the two-letter country code is stored — we do not store your IP address for analytics, and it is never sent to any third party for this purpose. This is used in aggregate to understand how the site is used and to measure sign-up/subscription conversion. When you are signed in to the dashboard, the same consent also covers product-usage analytics: which dashboard sections you visit, the controls you click, use of the in-dashboard search, and when you save settings (including how many clicks and how long a change took). This is grouped into a short-lived visit ("session") and used in aggregate to understand and improve how the dashboard is used — never to profile you individually. If you decline, none of this is collected and no analytics cookie is set.
2. Message content and translation
When you translate a message — by right-clicking, reacting with a flag, or through channel auto-translation — the text is sent to our translation providers to produce the translation: DeepL SE (Germany) and/or Microsoft Azure Translator.
- We do not permanently store the content of translated messages. We only record the number of characters translated, for usage accounting. A translation is held briefly in memory (up to 1 hour) so you can use "Report translation" on it; after that it is discarded. Content is stored beyond this only if you actively submit a report (see Section 1, Support tickets).
- Our providers process the text transiently to return a translation. Under their API terms, submitted text is not used to train their models and is not retained beyond what is needed to provide the translation.
- For channel auto-translation, messages in a configured channel are sent for translation and re-posted in the chosen language. Server administrators are responsible for informing members that a channel is auto-translated.
3. Why we use your data, and our legal bases (GDPR Art. 6)
| Purpose | Legal basis |
|---|---|
| Provide the translation service and dashboard | Contract — Art. 6(1)(b) |
| Enforce usage limits; process subscriptions/purchases | Contract — Art. 6(1)(b) |
| Send optional email notifications | Consent — Art. 6(1)(a) |
| Measure website usage and conversion (analytics) | Consent — Art. 6(1)(a) |
| Provide customer support | Contract / legitimate interests — Art. 6(1)(b)/(f) |
| Maintain security and prevent abuse | Legitimate interests — Art. 6(1)(f) |
| Comply with legal obligations (e.g. tax) | Legal obligation — Art. 6(1)(c) |
4. Third parties and sub-processors
- Discord — the platform the Service runs on and our authentication provider.
- DeepL SE (Germany) — translation processing.
- Microsoft Azure Translator — translation processing.
- Stripe — payment processing (see Stripe's own privacy policy).
- Hetzner Online GmbH (Germany) — hosting infrastructure.
For analytics we determine a visitor's country using an offline geolocation database hosted on our own server, so IP addresses are not shared with any third-party geolocation service.
We do not sell your personal data, do not use it for advertising, and use no third-party advertising or tracking scripts. Our analytics are first-party only.
5. Cookies
We use cookies sparingly and never for advertising or third-party tracking:
- Essential session cookie — keeps you signed in to the dashboard. Always active; required for the site to work.
- Analytics cookie (
av) — optional. A single first-party cookie holding a random visitor ID, set only if you accept the cookie banner. It lets us count unique visitors and measure conversion. You can decline it (no analytics is then collected), and you can withdraw consent at any time by clearing the cookie in your browser. - Dashboard session key — optional. When you accept analytics and use the dashboard, we keep a short-lived random "session" ID in your browser's
sessionStorage(not a cookie) to group one visit's activity for product-usage analytics. It is cleared when you close the tab and after 30 minutes of inactivity.
6. Data retention
- Account, preference, and usage data — retained while your account is active.
- Billing records — retained as required by tax and accounting law.
- Support tickets — retained as needed to handle your request and for a reasonable period afterward.
- Uploaded support images — stored on our server and deleted when the related ticket is removed.
- Analytics data — aggregated visitor, event, and country counts retained for trend analysis; it contains no IP address and no directly identifying information.
- After account deletion — when you delete your account we erase your personal data. We retain only a pseudonymized record consisting of a one-way (salted hash) form of your account identifier and your current month's character count. This contains nothing that identifies you and is used solely to stop the monthly free allowance being reset by deleting and re-creating an account (abuse/fraud prevention, Art. 6(1)(f)). It is automatically deleted when the monthly usage period rolls over.
You may request deletion of your data at any time (see Section 8).
7. International transfers
Most processing takes place within the EU/EEA (our hosting and DeepL are EU-based). Where a provider processes data outside the EU/EEA (for example Stripe in the United States), that transfer is protected by appropriate safeguards such as the EU Standard Contractual Clauses.
8. Your rights under the GDPR
You have the right to access your data; request rectification or erasure; restrict or object to processing; request data portability; and withdraw consent at any time. You may also lodge a complaint with your local data protection supervisory authority. To exercise any right, email [email protected].
9. Children
The Service is not intended for anyone under 13, or under the minimum age of digital consent in your country (up to 16 in some EU member states). Do not use the Service if you are under this age.
10. Security
We use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS) and restricted system access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the "Last updated" date above, and significant changes will be communicated where appropriate.
12. Contact
Operator: Lowe Garmark
Email: [email protected]
Website: https://translate.lowe.lol