1. Scope
This policy applies to the hosted DuskTranslate web application at dusk-translate.vercel.app and its account, project, and translation features. It does not control the policies of Google, Supabase, OpenRouter, or other AI providers; review their policies before sending content to them.
2. What We Process
| Data | Purpose | Where |
|---|---|---|
| Email address and account identifier | Account creation, sign-in, recovery, and access control | Supabase Auth |
| Project title, filename, chapter source, translations, glossary, style, model, and progress | Provide saved projects and resume work | IndexedDB on your device; Supabase cloud library when signed in |
| Original uploaded book | Reopen projects and produce EPUB exports | IndexedDB locally; private Supabase Storage for cloud projects |
| AI provider key | Authenticate a request you explicitly start | Editor memory only; not stored in DuskTranslate snapshots |
| Translation content and prompt | Generate the translation you request | Sent directly from your browser to the selected AI provider |
Developer logs and provider keys are intentionally excluded from saved project snapshots. Do not upload material you are not authorized to process.
3. Storage and Cookies
DuskTranslate does not currently set advertising cookies, analytics cookies, or tracking pixels. It uses browser storage that is necessary for requested features: IndexedDB for local projects, localStorage for preferences and remembered authentication, and sessionStorage for tab-scoped settings. See the Cookie Policy.
4. Third Parties
The current app uses Supabase for authentication and optional cloud storage, Google for optional OAuth and hosted fonts, OpenRouter for OpenRouter requests, and Google Generative Language services for Google AI Studio requests. The embedded editor is same-origin; it is not a third-party embed. Vercel hosts the application and may process ordinary infrastructure request data. The optional Yomitan setup link opens an independent extension website only when selected; DuskTranslate does not embed Yomitan, receive its lookup history, or send source text to it.
5. Purposes and Legal Bases
For an EU/EEA/UK user, the operator should document the final legal bases before launch. The intended mapping is: account and project delivery for contract or requested service; security and error prevention for legitimate interests; optional analytics or marketing only after valid consent; and legal compliance where required. This is a planning statement, not a completed jurisdictional assessment.
6. Jurisdiction Checklist
This service may need additional notices, rights workflows, contracts, age controls, or transfer safeguards depending on where the operator and users are located. Before launch, obtain jurisdiction-specific advice for the EU/EEA GDPR and national ePrivacy rules, the UK GDPR and PECR, India's Digital Personal Data Protection Act and rules, California's CCPA as amended by the CPRA, and any other state, national, consumer-protection, copyright, accessibility, or education-sector requirements that apply. This list is not legal advice and does not establish that any threshold is met.
7. Retention and Deletion
Local projects remain until you delete them, clear site data, or remove the browser profile. Cloud projects remain until you delete them or request account deletion. Supabase, Vercel, Google, and AI-provider retention may apply under their own terms. The operator should set and publish concrete backup, deletion, and log-retention periods before launch.
8. Your Choices
You can use the device-only library without creating an account, leave "Remember me" unchecked, delete local projects, download a backup, and delete cloud projects from the library. For access, correction, export, deletion, objection, restriction, or other privacy requests, contact [privacy email]. Identity verification may be needed to protect an account.
9. Security
Connections use HTTPS when served from the hosted deployment. Row-level policies restrict cloud projects and book objects to their owner. No browser application can guarantee absolute security: use provider keys with appropriate limits, rotate exposed keys, and do not share private books through untrusted services.
10. Children and Sensitive Data
DuskTranslate is not designed for children or for processing special-category or highly sensitive information. The operator should set a minimum age and child-data process appropriate to the launch jurisdictions.
11. Changes
Material changes should be posted on this page with a new "last updated" date. The operator should provide additional notice or obtain consent where applicable.