Privacy Policy

    Datenschutzerklärung

    Last updated: June 2026

    1. Controller / Responsible Party

    The controller responsible for the processing of personal data on this website is:

    BriefWizard (Ailiniyazi Maimaiti)
    Gustav-Heinemann-Ring 131
    81739 München, Germany
    Email: kontakt@briefwizard.de

    (See also our Legal Notice / Impressum.)

    2. Information We Collect

    Account information. When you register, we collect your email address and chosen username. You may optionally provide a display name, country, and a short bio, which will be visible on your public profile.

    Contributions. Translations, example sentences, comments, ratings, and edit suggestions you submit are stored and publicly displayed as part of the dictionary. Your username is shown alongside your contributions.

    Usage data. We collect standard server and access logs (pages visited, search queries, referring URLs, browser type, IP address, timestamps) to understand how the site is used, to diagnose errors, and to detect abuse.

    Cookies. We use essential session cookies to keep you signed in. If Google AdSense is active, it may set additional cookies for ad personalisation. You can manage or withdraw cookie consent at any time via the browser settings or Google's Ad Settings page.

    3. Legal Basis for Processing (GDPR Art. 6)

    • Contract performance (Art. 6(1)(b)): account registration, authentication, contribution storage — necessary to provide the service you signed up for.
    • Legitimate interest (Art. 6(1)(f)): server logs and fraud detection — our legitimate interest in operating a secure and stable service.
    • Consent (Art. 6(1)(a)): personalised advertising via Google AdSense — you may withdraw consent at any time.
    • Legal obligation (Art. 6(1)(c)): retention of data required by German law (e.g. fiscal and commercial records).

    4. How We Use Your Information

    • To provide and improve TurkicLex's dictionary and learning features
    • To attribute contributions to your public profile
    • To send transactional emails (password reset, moderation notices)
    • To detect and prevent spam, abuse, and policy violations
    • To display contextual or personalised advertisements via Google AdSense
    • To generate anonymised, aggregated usage statistics

    We do not sell your personal data to third parties.

    5. Third-Party Services

    TurkicLex relies on the following third-party services. Each is governed by its own privacy policy and may process data outside Germany:

    • Self-hosted database & authentication — as of June 2026, TurkicLex runs its own database and authentication infrastructure on a dedicated server hosted by Hetzner Online GmbH (Nuremberg, Germany, EU). Your account data and contributions are stored exclusively on this server and do not leave the EU. Previously, these services were provided by Supabase (EU/US); all data has been fully migrated to our self-hosted infrastructure.
    • Hetzner Online GmbH — server infrastructure (Germany, EU). IP addresses are processed in server access logs. See hetzner.com/legal/privacy-policy.
    • Resend — transactional email delivery (USA). Only your email address is transmitted when sending system emails. See resend.com/privacy.
    • Google AdSense — advertising; may set cookies and use device identifiers to show relevant ads. See policies.google.com/privacy.
    • OpenAI / Google Gemini — AI-generated translation drafts. Word content (no personal data) is sent to these services. See their respective privacy policies.

    For transfers to the USA, we rely on Standard Contractual Clauses (SCCs) or the respective service's adequacy decision where applicable.

    6. Data Retention

    Account data is retained for as long as your account is active. Server and access logs are retained for up to 90 days. You may request deletion of your account and associated personal data at any time. Publicly contributed content (translations, example sentences) may be retained in anonymised or pseudonymised form for dictionary integrity even after account deletion.

    7. Your Rights Under GDPR

    If you are located in the EU or UK, you have the following rights:

    • Right of access (Art. 15): obtain a copy of your personal data.
    • Right to rectification (Art. 16): correct inaccurate data.
    • Right to erasure (Art. 17): request deletion of your data ("right to be forgotten").
    • Right to restriction (Art. 18): limit how we use your data.
    • Right to data portability (Art. 20): receive your data in a machine-readable format.
    • Right to object (Art. 21): object to processing based on legitimate interest.
    • Right to withdraw consent (Art. 7(3)): withdraw consent for advertising cookies at any time without affecting the lawfulness of prior processing.

    To exercise any right, email us at kontakt@briefwizard.de. We will respond within 30 days. You also have the right to lodge a complaint with the competent data protection supervisory authority — in Bavaria: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

    8. Children's Privacy

    TurkicLex is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us and we will delete it promptly.

    9. Security

    We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, and role-based database access controls. No system is perfectly secure. If you discover a security vulnerability, please disclose it responsibly by emailing kontakt@briefwizard.de.

    10. Changes to This Policy

    We may update this policy periodically. When we do, we will update the "last updated" date at the top. For material changes we will display a notice on the site. Continued use of TurkicLex after changes constitutes acceptance of the revised policy.

    11. Contact

    Questions about this privacy policy? Contact us at: kontakt@briefwizard.de