Privacy Policy
You can use MORELESS web tools without an account. The optional account at translate.moreless.tools is for contributing translations of the MORELESS website. Files processed in the web tools are separate from this account service.
Who is responsible
The controller is MORELESS s.r.o., company ID 21477558, Uralská 689/7, Bubeneč, 160 00 Praha 6, Czech Republic. Contact [email protected] about your personal data.
Account and security data
We process your private login email, username, password hash, account preferences and authentication records to provide your account, verify your address and restore access. A working email address is required for this service. You may use a nickname. We do not need your real name or a public email address.
Account administration is necessary to provide the service you request under Article 6(1)(b) GDPR. Security records, including relevant IP addresses, browser information and timestamps, help us prevent abuse and investigate incidents under our legitimate interest in protecting the service, Article 6(1)(f). Necessary session and security cookies support login and forms. Language preferences are stored separately. We do not add account addresses to marketing lists or load external profile avatars.
What other contributors can see
People with access to the project can see suggestions, comments, review history, profile names and contribution activity. Do not put private information in suggestions or comments. Your login email is separate from public attribution.
Repository commits use a generated contributor name and a substitute address by default. If you explicitly choose public attribution in your profile, that information can become part of repository history. Changing your profile does not rewrite older commits. Suggestions need review. Accepting a suggestion does not automatically publish it to the website.
Hosting and service providers
The translation service runs on a dedicated Hetzner server in Germany. Cloudflare carries and protects connections to the service. Microsoft 365 delivers account messages and SharePoint stores encrypted backups. Authorized administrators and these providers process information needed to operate and protect the service.
A German application server does not mean every provider processes all data only in Germany or the EU. Provider access, subprocessors and any transfers outside the EEA must be covered by the applicable agreements and safeguards. Ask [email protected] for details of the safeguards that apply to your data.
Retention and backups
Account information is kept while the account is active. On closure, we review what can be deleted or anonymized and explain any justified retention. Translation and review history may remain necessary to maintain the website and document the origin of contributions. Public repository history can require separate handling.
Account security audit records expire after 180 days through a scheduled cleanup. Operational logs have bounded rotation and exclude full request URLs and routine client addresses. Mail rate limits use keyed recipient identifiers, with entries older than 24 hours removed on the next send attempt. These records are separate from Microsoft delivery and mailbox records.
Daily encrypted backups are removed from active storage after 30 days, after a newer backup has been verified. At least three recent recovery copies are kept if backups have been interrupted. SharePoint deletion moves a file to its recycle bin, normally for up to 93 further days. Provider recovery copies or applicable retention rules can extend final removal. Restoring a backup requires reapplying recorded account-erasure decisions. Deletion from the live account does not instantly remove every historical copy.
Your choices and rights
You can change profile and notification settings. Contact [email protected] for access, correction, erasure, restriction, portability or objection where applicable. We verify that a request concerns your data and explain any lawful limits. You may complain to the Czech Office for Personal Data Protection, ÚOOÚ, or another competent supervisory authority. We do not make decisions with legal or similarly significant effects about you solely by automated processing.