Privacy

What we collect

• The text you submit for translation and the translation we return.
• Technical metadata: timestamp, source and target language, the dialect, register and confidence the translation reported, latency, any error, request ID, the model we used.
• A keyed SHA-256 hash (HMAC) of your IP address, used for rate limiting, to estimate how many people visit (below) and, kept with each translation, to find your translations when you ask to delete them. Our application never stores the raw IP. Cloudflare and Google Cloud, which carry the traffic, see your IP address and may keep it in their own logs, under their own rules.
• If you rate a translation or send a correction: the rating and what you wrote, linked to that translation. We don't ask for your email for this.
• If you describe who you're writing to (relationship, age, a note such as “my grandmother, prefers formal ju”), that profile is saved only in your browser. It is sent with each translation to shape it and passed to Anthropic as part of that request. We don't keep it in our logs; only a one-way hash of it is part of the cache key.
• The last 20 translations you make with the translator are kept only in your browser, so you can open them again, even offline. This list isn't sent to us. Delete it with “Clear” under “Recent translations”, or by clearing this site's data in your browser.

Legal basis

• Translating text, voice notes and photos, reading aloud, Bisedo conversations, and document drafts (kept so you can open them again with their code): to give you the service you ask for (GDPR, Art. 6(1)(b)). When what you send is about someone else, we process it for the same purpose, in your and our legitimate interest in getting it translated (Art. 6(1)(f)).
• Translation logs, cached answers and read-aloud audio, IP hashes, rate-limit counters and server logs: our legitimate interest in keeping the service fast, working and safe from abuse (Art. 6(1)(f)).
• Counting visits (below): our legitimate interest in knowing how much each part of the free service is used, without following anyone (Art. 6(1)(f)).
• Corrections you send, here and in Bisedo, which we keep to improve translation, including to train a translation model: your consent, given when you send one (Art. 6(1)(a)). You can withdraw it at any time: write to us, or delete the correction below while it is still tied to your connection (see “Translations from this connection”). Ratings: our legitimate interest in improving the translations (Art. 6(1)(f)).
• Messages you send to our addresses: to answer you (Art. 6(1)(f)). Requests about your data rights: to meet our duties under the GDPR (Art. 6(1)(c)).
• Your deletion requests: to meet our duties under the GDPR (Art. 6(1)(c)).

Under the GDPR you can ask to see your data, receive a copy of what you sent, correct it, delete it, restrict its use, object to its use, and withdraw a consent at any time. Withdrawing doesn't affect what was done before. We have no accounts, so we can find your data only from something you give us: a document's reference code, the connection you're on, or an email you once sent with feedback. To delete, use the forms below. For anything else, write to us and we'll answer within a month. On a shared network we can't tell your translations apart from other people's, so we won't hand them over by connection alone. Nothing on albanisht makes decisions about you by automated means. You can also complain to a data protection authority, for example the one in the country where you live.

You can object at any time to what we do on the basis of legitimate interest (logs, counts, ratings). Write to us and we stop, unless we must continue to stop abuse. Visit counts are totals only, so they can't be undone for one person.

You don't have to give us anything. Without the text, voice or photo, we simply can't translate it.

If you appear in what someone else sends us (a text, a voice note, a document, a Bisedo conversation), we process it in the same way, only to translate it for them, and keep it no longer than stated here. You have the same rights: write to us.

Who receives your data, and where

• We don't sell your data or share it for advertising.
• Albanisht is run from the United States. The site and its database run on Google Cloud's servers in the European Union (Belgium), so what you send is stored there. Anthropic and OpenAI are in the United States. Microsoft reads Albanian translations aloud in the European Union. Cloudflare, which carries all traffic, works worldwide. We are putting the safeguards for each transfer outside the European Union in place with each provider, through their data processing terms; write to us to ask where each one stands.
• Besides our host and network (above), we send translation content only to the AI providers the service uses: Anthropic (translation, and reading text from photos and documents), OpenAI (speech recognition and read-aloud) and Microsoft (read-aloud of Albanian text, in the European Union). Under Anthropic's terms and OpenAI's policies, what we send through the API is not used to train their models. Anthropic may keep it for up to 30 days, and OpenAI the text it reads aloud for up to 30 days, to prevent abuse; then they delete it. They keep it longer only if a request is flagged as breaking their rules, or when the law requires it.
• The data-deletion confirmation email goes out through Resend, a company in the United States, from its European Union sending region (Ireland); Resend receives your address and the message to deliver it. Messages you write to our @albanisht.com addresses pass through Cloudflare, which forwards them to us.
• We don't keep the photos you upload or the voice you record on our server once they're processed.
• Before a photo leaves your device, the page makes it smaller and removes the details saved in the file, such as where it was taken. Our server removes them too, so they never reach Anthropic.
• When you bring a voice note to albanisht, it stays on your device until you tap Translate. Then the recording goes to OpenAI for speech recognition and is not kept by us; the text and its translation are handled like any other translation. A forwarded note may hold someone else's voice: bring only notes that were sent to you.
• The voice that reads a translation aloud is made by AI. For read-aloud, the translated text is sent to Microsoft (Azure AI Speech, in the European Union) (Albanian) and OpenAI (English). The audio is kept on our server for up to 30 days, so the same translation isn't synthesized again. If the read-aloud service is unavailable, your browser reads it instead, without sending anything off your device.
• In Bisedo (/biseda), each turn's recorded voice goes to OpenAI to become text, the text goes to Anthropic for translation, and the translation is sent for read-aloud. We keep neither the recording nor the translation read aloud, and each turn's words appear only in your browser: they aren't stored on our server. If you send a correction for a turn, we keep that turn and your correction, encrypted, to improve translation, including as examples to train a translation model (see Retention). Bisedo asks each person whether a woman's or a man's voice should read their words; only “woman” or “man” is sent with each turn, for the voice and so the Albanian translation agrees with the speaker (“jam e lodhur”), and it's forgotten when the tab is closed.
• Our app sets one cookie: the language you choose. It also keeps a few things on your device, only for features you use: your translation direction, text size and voice choices, recipients you save, your answers to our questions, whether you've seen Bisedo's guide, your recent translations, and, for as long as a tab is open, its translations and the voices chosen in a Bisedo conversation. A voice note you share to albanisht stays on the device until you open it (in the iPhone app, one day at most); a new share replaces it. None of it reaches us except with a request you make. Cloudflare, which serves the site, may set a strictly necessary security cookie.
• We count visits and the use of each feature as daily totals: by page language, browser type (such as Safari on iPhone) and the campaign tag of the link you came from. No IP address, no text and no identifier is kept with them. To estimate how many different people visit and how many come back, your IP's salted hash is folded into a daily summary that keeps no one's hash. The summary is deleted after 10 days, the totals after 400 days. None of this leaves our server.
• We don't use Google Analytics, Mixpanel or any other third-party analytics or advertising tools, and we build no profile of you: what we keep, and for how long, is on this page.

Retention

• Translation logs (source text, translation and metadata, including the two-letter country code from Cloudflare's CF-IPCountry header: country only, never city or IP), with the IP hash, to find your translations when you ask to delete them. Deleted after 7 days.
• Official-document translations (the extracted fields, with names and dates), with the IP hash and country they came from, so you can retrieve them with the reference code. Deleted after 7 days. We don't translate criminal record certificates (police clearances) for now, and those translated before 20 October 2026 have been deleted. A photo or scan of one is still read once by Anthropic, to tell what it is, before it is refused.
• Cached translations and their read-aloud audio (the response only, keyed by a hash of the text, linked to no one). Deleted after 30 days. Deleting your translations by connection deletes these too, for translations still in our logs (7 days) that weren't made for a saved recipient.
• Rate-limit counters. Deleted after 7 days.
• Email deletion requests. The encrypted address is erased as soon as the link is used; the request itself is deleted after 7 days.
• Bisedo corrections (the turn's transcript and translation, with your correction), encrypted. Deleted after 365 days.
• Ratings and corrections you send on a translation. Deleted after 365 days.
• Emails you send us: kept until your question is settled, then deleted.
• Our server's logs (the time, the page asked for, the answer's status and size, how long it took; no text and no IP address): kept in Google Cloud Logging under its own retention rules.
• IP hashes on longer-lived records (Bisedo corrections). Removed after 30 days; the record itself stays.

Children

Albanisht is a general translation service for families and travellers. It isn't directed at children under 13 or meant for children to use on their own, and we don't ask anyone's age. In Bisedo a family can talk with a child; an adult should hold the phone. A child's voice goes to OpenAI to become text, like anyone's, and we keep neither the recording nor the words. Corrections are for people aged 16 or older. A parent or guardian who believes a child has sent us personal data can delete it with the forms below or write to privacy@albanisht.com. Translations from teenagers are handled like anyone else's: no account, no profile, the same retention.

Delete my data

You can delete what you sent in three ways, each proving differently that it's yours: by the connection you're on, by a document's reference code, or by your email.

Contact

The controller of your personal data under the GDPR is Ergyn P., the private individual who runs albanisht.com.

For data rights or privacy questions: privacy@albanisht.com.