Applies to the website slovary.pro and the Slovary Android app (“Slovary Pro”). The iPhone/iPad build from the App Store has its own policy at slovary.vip/privacy.html. Last updated: 30 October 2026.
Slovary is a multilingual reference dictionary. We do not run analytics or advertising trackers, do not build profiles of you, and do not sell your data. Below is everything the website and the Android app actually process, who else is involved, and how long each kind of data is kept.
Information we process
Search queries and search statistics. When you search on the website (or use online search in the Android app), the words you look up reach our server so it can return results. For each search we record the query, the interface language, the country (looked up on our own server from an offline GeoIP database — no external service is asked), the time and the response time. We do not store your IP address with the query: instead we keep a pseudonymous key — a keyed hash (HMAC-SHA-256 with a secret held only on our server) of your network prefix (IPv4 /24, IPv6 /48) that changes every day. It lets us tell repeated automated queries apart from people and cannot be turned back into an IP address without the server secret. Kept for 90 days, then deleted.
Server logs. Like every website, our web server logs each request: IP address, time, the requested address (which contains the searched word), the referring page and your browser’s user-agent string. We use these logs only for security, abuse prevention and fixing errors. They are rotated daily and deleted after 14 days. The abuse protection keeps per-IP request counters and temporary blocks for up to 30 days; after that only totals without any IP address remain (up to 400 days).
Optional Telegram sign-in and sync. If you link your Telegram account (Settings → Account), we store your Telegram user id, username and first name, your browser sessions (with the browser’s user-agent string) and the data you choose to sync: search history (up to 500 entries) and settings. Linking happens through our bot @slovary_pro_bot; Telegram itself sees that you talked to the bot. Sending an article “to Telegram” delivers it to you through the same bot; we log only that a message was sent and when.
E-mail. E-mails we send (account confirmation, password reset, notifications for editors) are delivered through Resend. We log the recipient address, subject and delivery status.
Editor and staff accounts. People who edit dictionaries have accounts with a username, e-mail and a password hash. Sign-in attempts are kept for 7 days and the administrative audit trail (including IP address) for 180 days.
Cookies and local storage. Only functional ones: interface language, theme and display settings, your search history in the browser, the sign-in session and a short-lived “captcha passed” cookie. No analytics or advertising cookies are set by us.
Other services involved
Google reCAPTCHA (Google LLC) — loaded only on the verification page shown when our abuse protection asks you to prove you are human, and on the editor sign-in page. On those pages Google receives your IP address, browser data and reCAPTCHA cookies under Google’s privacy policy.
Google Fonts (Google LLC) — the website’s font is loaded from fonts.googleapis.com, so Google receives your IP address and browser data when a page loads.
Telegram (Telegram Messenger Inc.) — only if you use Telegram sign-in or send articles to Telegram.
Resend (Resend, Inc.) — delivers the e-mails described above.
Hosting — our own rented server; dictionary packs and app updates for the Android app are downloaded from GitHub (GitHub, Inc.), which sees the downloading IP address.
We do not use Google Analytics or any other analytics service. We do not share your data with anyone for their own purposes. Where required by law, we may disclose information in response to a valid legal request.
Android app
The dictionaries work fully offline on your device: offline lookups, history, favourites and settings stay on the device until you clear them or uninstall the app. The app contains no analytics, crash-reporting or advertising SDK. It contacts our server only for features you use: online (AI) search, Telegram sign-in and sync, sending an article to Telegram and checking for app updates. Voice input uses your device’s built-in speech recognition service (for example Google’s on most Android phones); the app itself does not record or upload audio.
Unlink Telegram or delete your account yourself on the website: Settings → Account → “Delete account”. This removes your Telegram id, username and first name, synced history and settings, all sessions and pending sign-in links; the same Telegram account can later sign in again as a new user.
Clear the browser or app history at any time; it lives only on your device unless you turned on sync.
You may ask us what we hold about you, to correct or delete it, or object to its processing: write to the address below.
Security
All traffic between your browser or the app and our server is encrypted (HTTPS/TLS). Access to the server and its databases is limited to the administrators.
Children
Slovary is a general-audience reference tool and is not directed at children. We do not knowingly collect personal information from children.
International users
Our server and the services listed above may process data in countries other than yours (Google, Telegram, Resend and GitHub operate internationally). We keep what goes to them to the minimum described here.
Changes
We may update this policy from time to time. Material changes will be reflected on this page with a new “last updated” date.