Privacy Policy

Datenschutzerklärung · Last updated: May 2026

Short version: We do not store your documents. Documents you submit are processed in real time to generate your explanation and are not retained after delivery. We do not use tracking cookies or sell your data.

1. Controller

The controller responsible for data processing on this website is:

Graham Lloyd-Smith
Liststrasse 43
70180 Stuttgart, Germany
Email: plaindeutsch@gmail.com

2. What data we process

When you visit this website

This website is hosted on Netlify. Netlify may collect standard server log data (IP address, browser type, pages visited, timestamps) for security and operational purposes. Please refer to Netlify's privacy policy for details. We do not use analytics, tracking cookies, or third-party advertising on this site.

When you use a PlainDeutsch tool

To use a tool, you submit document content (by pasting text or uploading a file). We process the following:

Document content — the text you paste or the file you upload, used solely to generate your plain-language explanation
Email address — if you choose to receive your result by email, used solely for that delivery

3. How we use your data

Your document content is sent to the Claude API (Anthropic) for processing. Anthropic acts as a data processor on our behalf. The explanation is generated and delivered to you. We do not store your document content after delivery. Your email address is used only to send your result and is not added to any marketing list.

4. Legal basis (GDPR Art. 6)

Processing is based on Art. 6(1)(b) GDPR — processing is necessary to perform the service you have requested — and Art. 6(1)(f) GDPR (legitimate interest) for server log data retained for security purposes.

5. Third-party processors

We use the following sub-processors to deliver the service:

Anthropic (Claude API) — AI processing of document content. Anthropic privacy policy
Netlify — website hosting. Netlify privacy policy
Gumroad — payment processing. Gumroad privacy policy
Make.com — workflow automation. Make.com privacy policy

All processors are contractually bound to handle data only as instructed and in accordance with GDPR.

6. Data retention

Document content is not stored beyond the processing session. Email addresses used for result delivery are not retained after the email is sent. Server log data is retained for up to 30 days for security purposes, then deleted.

7. Cookies

This website does not use cookies for tracking or analytics. Netlify may set a technically necessary cookie for security (e.g. rate limiting). No consent banner is required as no non-essential cookies are used.

8. Your rights under GDPR

You have the right to:

Access the personal data we hold about you (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data ("right to be forgotten") (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing (Art. 21 GDPR)
Lodge a complaint with a supervisory authority — in Germany, the relevant authority is your state's Datenschutzbeauftragter

To exercise any of these rights, email plaindeutsch@gmail.com. We will respond within 30 days.

9. Data transfers outside the EU

The Claude API is operated by Anthropic, a US-based company. Data transfers to the US are based on standard contractual clauses (SCCs) as provided under Art. 46 GDPR. Anthropic maintains appropriate safeguards for international data transfers.

10. Changes to this policy

We may update this privacy policy from time to time. The current version is always available at plaindeutsch.com/privacy.html. The date of the last update is shown at the top of this page.