Draft · 8 November 2026

Privacy

omalaka collects as little as it can, uses it only to run the site and credit contributors, and never sells it or shows ads.

Who is responsible

[To be filled in: the person or organisation responsible for omalaka, and its address.] Questions and requests: info@omalaka.net.

What we keep, and why

  • Without an account: the languages you speak and want to learn, teams you join and work you contribute, linked to a random cookie on your device (__Host-omalaka_session). It only keeps you signed in; there are no tracking or advertising cookies.
  • With an account: your email address (to send sign-in codes) or your Google account ID and email (if you use Google sign-in).
  • Your birth year, not your birth date: accounts are for people aged 13 and over, and people under 18 are never credited by their real name.
  • The name you're credited by, your credit choice (nickname, real name or anonymous) and, if you add it, your town.
  • Contributions: the sentences you write, translate and check, with dates and who did what.
  • Visit counts: the site counts visits per day as plain numbers, to see how many people it reaches. Nothing about you is kept for that, and there are no tracking cookies.
  • Technical logs: the server keeps short-lived logs of requests and mail delivery to fix problems and stop abuse. They are rotated automatically and not used for anything else.

What becomes public

Accepted sentence pairs are published as open data under CC BY 4.0, with the contributors' chosen names (or "Anonymous"). Leaderboards show chosen names and points. Your email, birth year and town (unless you choose to show it) are never published.

Where it is kept, and who helps

  • Cherry Servers (Lithuania, EU) hosts the server and its nightly backups.
  • Google Cloud (Warsaw, Poland, EU) keeps an encrypted copy of the nightly backups for 90 days.
  • Cloudflare provides DNS and forwards mail sent to @omalaka.net addresses.
  • Google, only if you choose "Continue with Google".

Sign-in codes are sent by our own mail server.

How long

Guest data that hasn't been used for a year may be deleted. Account data is kept until you ask us to delete it. Sign-in codes expire after 10 minutes.

Your rights

You can ask to see, correct or delete your data by writing to info@omalaka.net. When we delete an account, contributions that were already published in a dataset release stay in that release (that's how open licences work), but we stop showing your name on the site.

This draft follows the EU's GDPR, which also covers South Africa's POPIA in practice. It will be reviewed before omalaka launches.