Privacy policy

Last updated: October 2026 · According to the EU General Data Protection Regulation (GDPR)

1. Controller

As tapdict.com is operated from Germany, the GDPR applies in full, also if you visit from outside the EU.

2. Hosting

This website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (privacy policy). The server is located in Germany. The provider processes data only on our behalf and according to our instructions (data processing agreement according to Art. 28 GDPR).

3. Visiting the website

When you open a page, your browser automatically sends technical information to our server: your IP address, the date and time, the requested address, the browser type (user agent) and possibly the page you came from (referrer). The server needs this information to deliver the website to you.

• No access logs: Our server does not keep logs of page visits.
• Error logs: Technical error messages can, in individual cases, contain an IP address. They are used only to find and fix errors and are deleted automatically after a short time, at the latest after 14 days.

Legal basis: Art. 6(1)(f) GDPR. We have a legitimate interest in delivering the website securely and reliably.

Content delivery and protection by Cloudflare, Inc.

All requests to this website pass through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (privacy policy). The provider delivers the pages quickly from a data centre near you and protects the website against attacks. For this it processes the technical information listed above, in particular your IP address. Data may be processed in the USA. The provider is certified under the EU-U.S. Data Privacy Framework, and we have concluded a data processing agreement with it (Art. 28 GDPR) that includes the EU standard contractual clauses.

To tell people and bots apart, the provider may set a technically necessary cookie (for example __cf_bm). It contains no information about who you are and expires after a short time. Legal basis: § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. We have a legitimate interest in a fast and secure website.

4. Downloads, searches, API and bot protection

Before a download starts, your browser solves a small calculation task (“proof of work”). This keeps automated bots from downloading files in masses. The task is created by our server and solved in your browser; no third-party service is involved and nothing is stored on your device.

When you look up a word on the website or through the API, the search term is used only to answer your request. It is not stored. To limit the number of downloads and API requests per visitor, our server keeps a hashed form of your IP address (for IPv6 only the network part) in its working memory for about 10 minutes. It is never written to disk and never combined with other data.

For each file we store how often it was downloaded per day, a plain number without any information about you. We use these numbers to see which dictionaries are useful and may show them on the website.

Legal basis: Art. 6(1)(f) GDPR. We have a legitimate interest in protecting the service from abuse and in offering it free of charge.

5. Cookies and storage on your device

We do not set cookies and do not store or read any information on your device (no local storage, no fingerprinting). The only exception is the technically necessary security cookie of Cloudflare, Inc. described in section 3. A consent banner is therefore not needed.

6. Contact by email

If you write to us, we use your email address and your message only to answer your request, for example a report of a mistake in a dictionary. We delete the data when it is no longer needed, unless legal retention periods apply. Legal basis: Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR if your request concerns a contract.

7. Links to other websites

Our install guides link to other websites, for example to download Kindle Previewer, dictutil or Yomitan. Data is only sent to these websites when you click such a link. Their own privacy policies apply there.

8. Transfers to third countries, no profiling

Our server is located in Germany. Data is only transferred to a third country through Cloudflare, Inc. as described in section 3. We do not sell or share data, we do not create profiles and we do not use automated decision-making.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise your rights, write to [email protected]. Please note that we usually cannot identify you, because we store no personal data about visitors.

10. Right to lodge a complaint

You have the right to complain to a data protection supervisory authority. The authority responsible for us is:

You can also contact the supervisory authority of the country where you live.

11. Changes

We update this policy when our website changes. The date at the top shows the latest version.