Draft for review. This document is a draft and has not been reviewed by a lawyer. It will be finalized before the service opens to the public.

Privacy Policy

Draft of October 27, 2026

This policy explains what information the Yiddish Spell Checker (the "Service"), operated by Shmiel Ber Levy ("we", "us"), collects, how we use it, and your choices.

1. What we collect

Google account details: when you sign in with Google, we receive your email address, your name, and your profile picture link. We do not receive your Google password or access to your Gmail, files, or contacts.
Email and password: if you sign up with an email and password, we store your email address and your password only as a secure one-way hash; nobody, including our admins, can see your password.
Your custom words: the words you add to your personal dictionary, the words you block, and the words you choose to always ignore. They are saved on our server, tied to your account, and are visible and used only for your account.
Usage counts: how many words you checked in each period, how many checks you ran, and when you last signed in. We use these to apply plan limits.
Word suggestions: if you suggest a word to the dictionary, we store the word and your email address so administrators can review it.
The text you check: it is sent to our server to be checked and the results are sent back. We do not save your text.
The Chrome extension: the extension reads the text in a text box only when you press its "check spelling" button or keyboard shortcut, and sends only that text to our server to be checked, the same as the website. It does not read other page content, your browsing history, or what you type before you ask for a check. It uses the same sign-in cookie as the website and keeps nothing else on your computer except which sign-in tab it opened.
IP addresses: we log the IP addresses you use the Service from, for security and abuse prevention, and keep them for 90 days.
Error records: when a check fails, we record the time, the kind of error, how many words were sent, and your browser type (not your text) for 30 days, so we can fix problems.
Technical data: like any website, our hosting provider processes your IP address and browser details to deliver the Service, secure it, and prevent abuse. Short-term server logs may include this data, but not your text.

2. Cookies

We use one essential cookie to keep you signed in. We do not use advertising or tracking cookies. Google's sign-in button may set its own cookies, covered by Google's Privacy Policy.

3. How we use your information

to provide the Service, including checking your text and applying your custom words;
to apply plan limits, prevent abuse, and keep the Service secure;
to improve the dictionary from suggestions;
to contact you about your account or important changes.

4. We do not sell your data

We do not sell, rent, or trade your personal information, and we do not use it for advertising. Information handled by the Chrome extension is used only to provide the spell check, in line with the Chrome Web Store User Data Policy, including its Limited Use requirements. We share information only with:

service providers that run the Service for us: Cloudflare (hosting and database), Google (sign-in) and Resend (sending sign-up and password-reset emails);
authorities, when the law requires it, or to protect our rights and users;
a successor, if the Service is transferred, under this policy.

5. How long we keep it

We keep your account details, custom words, and usage counts while your account is active. If you ask us to delete your account, we delete this data within 30 days, except where the law requires us to keep it.

6. Your choices and rights

You can see, add, and remove your custom words in the app at any time.
Deletion on request: email shmielber@gmail.com from the email address on your account, and we will delete your account data.
You can also ask for a copy of your data or a correction.

7. Security

Data is encrypted in transit (HTTPS), and access to it is restricted to administrators of the Service. No system is perfectly secure, but we work to protect your information.

8. Children

The Service is not intended for children under 13, and we do not knowingly collect their information.

9. Where data is processed

Your data is stored and processed in the United States and in other countries where our providers operate.

10. Changes to this policy

We may update this policy. We will post the new version here with a new date, and for important changes we will try to notify you.

11. Governing law and contact

This policy is governed by the laws of the State of New York, USA. Questions or requests: shmielber@gmail.com.