Privacy policy
Last updated: July 18, 2026
This policy describes what Yaply processes, why, for how long, and your rights. The guiding principle: we are not interested in your messages — we translate them in transit, we do not store them.
Data controller
Matthias Marchione (publisher of Yaply) — contact@yaply.app.
Data we collect
Account: email and password (Argon2-hashed, never plaintext). Billing: handled by Stripe; we never see or store your card number. Usage: daily counters (number of translations and character volume) — plain numbers, no content. Translated content: processed in transit only (see next section).
Translation: your messages are never stored
When the extension translates a post, a reply or a private message, the text transits through our server to our translation provider, and the translation is returned to you. Your private messages (DMs) are NEVER stored — not in a database, not in a cache, not in logs. For public posts only, a technical cache keeps the translation keyed by a cryptographic fingerprint (SHA-256) of the text — never the source text itself — so a viral post is not translated twice.
Processors
Stripe (payments) — Ireland/USA, PCI-DSS certified. Replicate (translation engine) — USA; transfers governed by the European Commission's Standard Contractual Clauses (SCC); API data is not used to train models. Hetzner (hosting) — Germany, European Union. DataFast (cookieless analytics) — aggregated, anonymous statistics.
Cookies
The site uses no tracking cookies and no advertising trackers. The only cookies are strictly necessary for the service (login session, httpOnly) and exempt from consent. Audience measurement (DataFast) works without cookies and without individual identifiers: no consent banner is required.
Retention
Account: while active, then deleted/anonymized after account deletion. Usage counters: daily aggregates, purged regularly. Public-post translation cache: periodic automatic purge. Billing: statutory accounting periods (Stripe).
Your rights
Under the GDPR you have the rights of access, rectification, erasure, restriction, objection and portability. Account deletion is available directly in your account space, and any request can be sent to contact@yaply.app (answered within 30 days). You may lodge a complaint with your supervisory authority (in France: CNIL, cnil.fr).