Privacy Policy
Effective 18 June 2026
WunderDict is a tool for learning German: you build word lists, look words up, and review them with quizzes and flash cards. This policy explains what we collect, why, who we share it with, and the choices you have. We aim to collect as little as possible and never sell your data.
Who we are
WunderDict ("we", "us") operates the website at www.wunderdict.com and the API at api.wunderdict.com. For any privacy question or request, contact us at privacy@wunderdict.com.
What we collect
Account information
- Email and password if you register with email. Your password is stored only as a salted hash, never in plain text.
- Google account details if you sign in with Google. We request only the
openid,email, andprofilescopes, and receive your name, email address, profile picture, and Google account ID to create and identify your account. We do not access any other Google data, and we do not post anything to your Google account.
Content you create
- Your word lists, the words and translations in them, and which items you mark as favourites.
- Your learning activity: quiz and flash-card results, streaks, and progress statistics used to drive the practice features and your "Progress" dashboard.
Technical data
- Cookies required to run the app (sign-in session, sign-in security, and your cookie choices).
- Your approximate region, derived locally from your IP address, only to decide whether to ask for cookie consent. This lookup runs on our own server; your IP address is not sent to a third party for this.
- With your consent, analytics (Google Analytics) and advertising (Google Ads) cookies. See the Cookie Policy for the full list and durations.
How we use your data
- To create and secure your account and keep you signed in.
- To provide the core product: building lists, looking up words, and practising them.
- To show you your own progress and statistics.
- With your consent, to understand how the app is used and to measure advertising.
The lawful bases we rely on are performance of our contract with you (running the service), your consent (analytics and advertising), and our legitimate interest in keeping the service secure and working.
Who we share it with
We do not sell your data. We use a small number of service providers ("sub-processors") to run WunderDict:
- Vercel: hosts the frontend website.
- Hetzner: hosts the application server and database, located in Germany (EU).
- Google: Google sign-in (if you use it), the Google Translate API (to produce translations for the words you look up), and, only with your consent, Google Analytics and Google Ads.
- OpenRouter: used to enrich dictionary entries (articles, plurals, examples, and so on). Only the word or phrase being looked up is sent; we do not send your account details or personal data.
- ImprovMX: forwards email sent to our contact address.
We may also disclose data if required by law, or to protect the rights, safety, and security of our users and the service.
Where your data is stored
Your account and content are stored on our server in Germany (EU). Some providers above may process limited data (such as request metadata) in other countries under appropriate safeguards.
How long we keep it
We keep your account and content for as long as your account exists. If you delete your account, or ask us to delete it, we remove your personal data. Note that the dictionary word cache itself (definitions, translations, grammar) is shared and not personal to you, so it is retained.
Your rights
Depending on where you live, you have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent at any time (you can change cookie choices from the Cookie settings link in the footer). To exercise any of these, email privacy@wunderdict.com. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.
Children
WunderDict is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will remove it.
Security
All traffic is encrypted with HTTPS, passwords are stored only as salted hashes, and sign-in sessions use secure, HTTP-only cookies. No system is perfectly secure, but we take reasonable measures to protect your data.
Changes to this policy
We may update this policy as the service evolves. We will change the effective date above and, for material changes, make a reasonable effort to notify you.
See also our Terms of Service and Cookie Policy. Back to WunderDict