Privacy Policy

AnKMADE ("we", "us", "our") operates the translation service at ankmade.com (the "Service"). This policy explains what data we collect, why, and the choices and rights you have. We are based in the EU (Denmark) and handle personal data in line with the EU General Data Protection Regulation (GDPR).

Questions about this policy or your data? Contact us at contact@ankmade.com.

1. What we collect

• Account data — if you create an account: your email address, a securely hashed password (we never store your password in plain text), your subscription tier, and email verification status. If you sign in with Google, we store your Google account identifier and email instead of a password.
• Content you submit for translation — the text or document (e.g. an IDML file) you ask us to translate. This is sent to a translation engine to produce your result and returned to you; we do not keep a copy of the text or the translated content. Uploaded files and translated outputs are stored temporarily on our server and automatically deleted (by default within ~20 minutes) once the job completes or expires.
• Usage data — to enforce fair-use limits and prevent abuse, we log metadata about each translation request: character/word counts, language pair, translator engine, status, timestamp, and a hashed version of your IP address (we do not store your raw IP address). We do not log the text itself in this record.
• Session cookies — when you're signed in, we set a small number of strictly-necessary, HTTP-only cookies to keep you logged in (a short-lived session token and a longer-lived sign-in-renewal token, plus a temporary cookie during Google sign-in). We do not use analytics, advertising, or tracking cookies today.
• Correspondence — if you email us (e.g. via the contact page or account-related emails like password resets and verification), we keep a record of that correspondence for support and record-keeping purposes.

2. Why we process this data

• To provide the Service — translating your submitted content and returning the result (performance of a contract with you / to provide a service you requested).
• Account & security — creating and securing your account, authenticating sign-in, verifying your email, and resetting your password if needed.
• Fair use & abuse prevention — enforcing daily usage limits per account/IP and detecting abusive traffic (legitimate interest in keeping the Service available and secure for everyone).
• Support & communication — responding to your emails and sending account-related notifications (e.g. "your file is ready").

3. Who we share data with

We don't sell your data. We use the following processors to run the Service, each of whom only processes data as needed to provide their part of it:

• Turso — our database host (account, usage, and mail-log data).
• Render — hosts the backend that processes translations.
• Cloudflare — hosts the website and its serverless functions (session handling, request routing).
• Resend — delivers transactional emails (verification, password reset, notifications) on our behalf.
• Translation engines — the text or document content you submit is sent to the translation engine you (or the default setting) selects to produce your translation — this may include third-party services such as Google Translate, or a self-hosted/managed AI translation model. These providers process the submitted content only to return a translation and are not used to build a profile of you.
• Google — if you choose "Continue with Google" to sign in, Google acts as your identity provider for that sign-in.

We may also disclose data if required by law, to protect our rights, or to prevent fraud or abuse of the Service.

4. How long we keep data

• Uploaded files and translation outputs: deleted automatically shortly after your job completes (by default within ~20 minutes).
• The text/content you submit: not retained by us beyond producing your result.
• Account data: kept while your account is active. You can ask us to delete it at any time (see Section 6).
• Usage metadata (counts, hashed IP, timestamps): kept for as long as needed to operate and secure the Service.
• Support correspondence: kept for a reasonable period to handle follow-ups and for our own record-keeping.

5. Cookies

We only use strictly-necessary cookies required to keep you signed in and to protect the sign-in flow (see Section 1). Because these cookies are essential to the Service and not used for tracking or advertising, we don't currently show a cookie-consent banner. If that changes (e.g. if we add analytics), we'll update this policy and ask for your consent where required.

6. Your rights

Subject to applicable law (including the GDPR if you're in the EU/EEA), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (e.g. update your email in your account).
• Request deletion of your account and associated data.
• Object to or restrict certain processing, and request a portable copy of your data.
• Lodge a complaint with your local data protection authority — in Denmark, the Danish Data Protection Agency (Datatilsynet) .

To exercise any of these rights, email contact@ankmade.com. We'll respond within a reasonable timeframe.

7. Security

We take reasonable technical and organisational measures to protect your data, including encrypted (bcrypt-hashed) password storage, encrypted connections (HTTPS), HTTP-only session cookies, and restricted admin access. No system is 100% secure, but we work to keep the Service and your data safe.

8. Children

The Service is not directed at, and should not be used by, children under 16. We do not knowingly collect personal data from children.

9. International transfers

Our processors may store or process data outside the EU/EEA (e.g. the US). Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses, as required by the processors we use.

10. Changes to this policy

We may update this policy from time to time. We'll update the "last updated" date above; significant changes will be highlighted on the site.