Privacy policy

LocaleQA is operated by Ryo Washiyama, who is responsible for the service described in this policy. Privacy and data requests can be sent to ryo@localeqa.com.

• Account information: your email address, an internal account identifier, account creation and update times, early-access usage, and active share links.
• Localization inputs: the reference and target file contents, filenames, selected rules, target locale, and glossary entries you submit for a scan.
• Stored report information: filenames, file sizes, structural paths, issue classifications and messages, check settings, and short source or target excerpts used as finding evidence. Complete uploaded files are not stored separately from the report.
• Authentication information: hashed magic-link tokens, expiration times, essential session cookies, and pseudonymized rate-limit records derived from email addresses and IP addresses.
• Operational information: hosting and service logs may include request time, IP address, browser or device information, requested route, and error details.

We use this information to run deterministic checks, create and retain reports, authenticate accounts, restore saved reports on another device, enforce early-access limits, provide report sharing, prevent abuse, troubleshoot failures, secure the service, and respond to support or privacy requests.

LocaleQA does not use uploaded localization content to train AI models, does not perform linguistic AI inference, and does not sell personal information or use it for cross-context behavioral advertising.

LocaleQA uses an essential, secure HTTP-only cookie to keep saved reports associated with the browser and to maintain sign-in. The current application does not use advertising cookies or third-party behavioral analytics cookies.

Where data-protection law requires a legal basis, LocaleQA processes information as needed to provide the service you request, to pursue legitimate interests in securing and improving reliable service operations, to comply with legal obligations, and with consent where consent is required.

LocaleQA uses service providers for application hosting and private object storage, currently Vercel, and for passwordless email delivery, currently Resend. These providers process information on LocaleQA's behalf under their own service terms and data-protection commitments.

Information may also be disclosed when required by law, to protect the service or its users, during a business reorganization, or with your direction. LocaleQA does not make a report public unless a user creates a share link.

• Early access retains the latest 10 reports. Creating additional reports removes the oldest saved report and disables its share link.
• Raw uploaded file bodies are used to perform the scan and are not retained as separate uploaded files. Short excerpts may remain in the stored report evidence.
• Magic links expire after 15 minutes and are deleted after use, revocation, or when an expired link is checked.
• Account details, saved-report lists, active share links, and stored reports remain until removed under the report limit or deleted through account controls or a verified request, subject to legal or security needs.
• Hosting providers may retain security and operational logs according to their configured retention periods.

See the Data Handling page for a shorter operational explanation.

Anyone who receives a share link can view and download the stored report without signing in. Reports may contain filenames, paths, glossary terms, and short content excerpts. The user who created the link can revoke it, but LocaleQA cannot control copies already downloaded or redistributed by recipients.

You can delete individual reports, revoke active report links, and request complete account deletion from the Account page. Complete deletion for an email account requires a fresh confirmation link sent to that address. You may also contact LocaleQA to request access, correction, deletion, restriction, portability, or objection where applicable.

You may also have the right to complain to the data-protection authority where you live. LocaleQA will respond according to applicable law.

LocaleQA uses access controls, secure sign-in cookies, private storage, short-lived login links, request limits, and HTTPS in production. No system can guarantee absolute security. Service providers may process information in countries other than your own; applicable contractual or legal safeguards should be reviewed before regulated or highly sensitive use.

LocaleQA is a business service and is not directed to children under 18. We may update this policy as the service changes. The effective date above will change when the policy is revised materially.