Last Updated: October 24, 2025 | Effective Date: November 1, 2025

Introduction

At Dictionary, we believe that language belongs to everyone. To provide you with accurate definitions, seamless translations, and personalized learning tools, we collect certain types of information. We are committed to processing this data transparently, securely, and in strict accordance with applicable privacy laws including GDPR, CCPA, and PIPL.

Note: This document applies to our web application, mobile apps, and browser extensions. Data collection practices may vary slightly by platform due to technical limitations, but our core privacy principles remain identical.

Personal Information

We collect personal data only when you voluntarily provide it or when necessary to fulfill your account requests. This includes:

Data Type Examples Collection Method
Account Credentials Email, username, password hash Required Account Creation
Profile Information Display name, profile photo, preferred languages Optional User Settings
Communication Records Support tickets, feedback, survey responses Optional Direct Submission
Payment Details Billing address, transaction IDs (processed securely via Stripe/PayPal) Required Premium Checkout

We never sell your personal information to third parties for marketing purposes. Payment information is processed by PCI-DSS compliant providers and is never stored on our servers.

Search & Usage Data

To improve our definitions, suggest relevant synonyms, and optimize performance, we log anonymized usage patterns when you interact with our platform:

  • Search Queries: Words or phrases you look up, including date/time stamps
  • Interaction Metrics: Click-through rates on definitions, pronunciation plays, and synonym selections
  • Learning Progress: Saved words, flashcard completion rates, and vocabulary streaks (if enabled)
  • Platform Features: Translation pairs used, offline mode toggles, and export requests

All usage data is aggregated and anonymized within 24 hours of collection. You can disable usage analytics in your account settings without affecting core functionality.

Automatic Collection

Like most modern web services, Dictionary automatically collects technical data to ensure security, compatibility, and service reliability:

  • Device information (OS, browser type, hardware model)
  • IP address and approximate geographic location (city/region level)
  • Network conditions and connection speed
  • Crash logs and performance diagnostics

Privacy Guarantee: We do not collect precise GPS location, contact lists, call logs, or microphone access unless explicitly enabled for voice search features. All permissions are optional and clearly requested at point-of-use.

Cookies & Tracking Technologies

We use cookies and similar technologies to maintain session security, remember your preferences, and analyze traffic. Categories include:

\n
Category Purpose Duration
Essential Authentication, security tokens, CSRF protection Session / 24 hours
Functional Language preferences, theme settings, saved searches Up to 12 months
Analytics Page performance, feature adoption, error tracking Anonymous, 30 days
Advertising Retargeting (only with explicit consent) 180 days (user-controlled)

You can manage cookie preferences through our built-in consent manager or your browser settings. Disabling essential cookies may limit platform functionality.

Third-Party Data & Services

Dictionary integrates with trusted partners to enhance your experience. We only share the minimum data necessary for each service:

  • Cloud Infrastructure: AWS & Cloudflare (hosting, CDN, DDoS protection)
  • Analytics: Plausible & Fathom (privacy-focused, no cross-site tracking)
  • Authentication: Google, Apple, Microsoft OAuth providers
  • Language APIs: Third-party etymology & phonetic databases (anonymized queries only)

None of our partners are permitted to use your data for independent marketing or profiling. All integrations undergo regular security audits.

Data Retention & Deletion

We retain your data only as long as necessary to provide our services, comply with legal obligations, or resolve disputes:

  • Active Accounts: Data retained indefinitely until you request deletion
  • Inactive Accounts (>2 years): Search history & learning data anonymized; account data archived
  • Deleted Accounts: Personal data permanently erased within 30 days. Aggregated/anonymous data may be retained for service improvement
  • Legal/Financial Records: Retained for 7 years per tax & compliance requirements

Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access & Portability: Request a complete export of your data in JSON/CSV format
  • Correction: Update inaccurate profile or contact information at any time
  • Deletion: Permanently remove your account and associated data
  • Opt-Out: Disable personalized analytics, marketing communications, and third-party sharing
  • Appeal: Challenge automated decisions related to content moderation or account status

To exercise these rights, visit Settings → Privacy & Data or contact our Data Protection Officer directly. We respond to all verified requests within 30 days.

Contact Us

If you have questions about this policy, our data practices, or wish to submit a privacy request, please reach out:

  • Email: privacy@dictionary.com
  • Mail: Dictionary Inc., Privacy Department, 123 Lexicon Way, San Francisco, CA 94105, USA
  • Data Protection Officer: dpo@dictionary.com

We are committed to transparency and will gladly clarify any aspect of our information collection practices.