Privacy Policy

Last updated: 2026

1. Data We Collect

OpenTranslate collects the minimum data necessary to provide the service: account information (name, email, password hash), translation history (source and target text, languages, engine used), API key metadata (name, usage counts), and audit logs for admin actions.

2. How We Use Your Data

Your data is used solely to provide and improve the translation service. Translation history is stored to allow you to review past translations and is never shared with third parties. We do not sell user data.

3. Self-Hosted Deployments

OpenTranslate is designed to be self-hosted. In a self-hosted deployment, all data remains on your infrastructure. The organization operating the deployment is responsible for their own data handling practices under this policy.

4. Data Retention

Translation history is retained until you delete it manually or clear all history. Account data is retained until account deletion. Audit logs are retained indefinitely for security purposes. API key usage logs are retained for 90 days.

5. Security

Passwords are hashed using bcrypt with a cost factor of 12. API keys are stored as SHA-256 hashes. All sensitive operations are audit logged. We recommend enabling HTTPS in all deployments.

6. Your Rights

You may request export, correction, or deletion of your personal data by contacting the administrator of your OpenTranslate deployment. Account owners can delete their translation history and saved translations directly from the dashboard.

7. Contact

For privacy-related questions, contact the administrator of your OpenTranslate deployment. For the open-source project, open an issue on GitHub.