Privacy Policy

This Privacy Policy explains how tomyaml.com (the “Site”, “we”, “us”) collects, uses, stores and protects information when you use our document translation service. We designed the service to minimize data collection: no account is required and uploaded files are deleted promptly. The service is operated by TomYAML, which is the data controller (tomyaml.com); contact: [email protected].

1. Information we process

Uploaded documents: file content and file name, processed solely to provide the translation.

Security and technical data: IP address (stored only as a salted hash for rate limiting and abuse prevention), browser user agent, timestamps and access logs.

Preferences: interface language, stored locally in your browser (localStorage).

We do not require registration and do not knowingly collect names, email addresses or other directly identifying information.

2. How we use information

  • To provide the document translation service and deliver results;
  • To keep the service secure and prevent abuse, fraud and overload;
  • To comply with applicable legal obligations;
  • To display advertising as described below.

3. Legal bases for processing (GDPR)

  • Performance of a contract or steps at your request (Art. 6(1)(b) GDPR): providing the translation;
  • Legitimate interests (Art. 6(1)(f)): security, abuse prevention and service integrity;
  • Consent (Art. 6(1)(a)): advertising and non-essential cookies; you may withdraw consent at any time;
  • Legal obligations (Art. 6(1)(c)).

4. Retention and deletion

Source files are deleted from our servers as soon as the translation completes.

Translated files are stored only temporarily — typically deleted automatically after a short period, or 60 seconds after the first download — and are then permanently removed.

Security logs and hashed identifiers are retained for limited periods (usually no more than 30 days) unless required for a security investigation.

5. Cookies and local storage

Essential cookie: tw_sess — maintains your anonymous session and helps protect against CSRF. It is strictly necessary and set without consent.

Local storage: interface language preference.

Advertising cookies: consent is collected by Google's certified consent management platform (CMP). Advertising cookies are set only after consent; if you decline, none are set.

6. Google AdSense and third-party advertising

We use Google AdSense to display ads on this Site.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.

Google's use of advertising cookies (including the DoubleClick cookie) enables it and its partners to serve ads to you based on your visits to this Site and/or other sites on the Internet.

You can opt out of personalized advertising by visiting Google Ads Settings, opt out of some third-party vendors' use of cookies at aboutads.info, and — for users in the EU/UK — visit youronlinechoices.eu.

Google Ads Settings · aboutads.info · youronlinechoices.eu · How Google uses data

Personalized ads are requested only after consent. Users in the EEA, UK and Switzerland see Google's certified CMP consent dialog; users elsewhere can manage personalized advertising at any time via “Cookie Settings” in the footer.

7. Sharing and international transfers

We do not sell your personal information.

We share data only to the extent necessary with: hosting and infrastructure providers, our self-hosted translation engine, and the advertising partner described above (Google).

Where data is transferred outside the EEA/UK (for example, to Google), we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

8. Your rights

If you are in the EEA/UK (GDPR) or another jurisdiction, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, to withdraw consent at any time, and to lodge a complaint with a supervisory authority.

To exercise these rights, contact [email protected]. Because we do not maintain user accounts, we may be unable to identify data relating to you; in most cases the files have already been deleted.

9. Security

We use encryption in transit (TLS), salted hashing, rate limiting and prompt deletion. No method of transmission or storage is 100% secure.

10. Children's privacy

The service is not directed to children under 16, and we do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy; the “Last updated” date on this page will change. Material changes will be announced on the Site.

12. Contact

For any privacy-related question, contact [email protected].