Privacy
Draft: awaiting approval
This text is a draft. It is not yet approved and is not legal advice. The open questions below are for the operator to answer before it is published.
- Controller: Bob Greenyer, contact through RemoteView.ICU. To confirm: that a contact route without an address meets UK GDPR Article 13's 'contact details'.
- Processors: the list (IONOS, which hosts the server) is confirmed by the operator (2026-10-11). Still open: is IONOS's data processing agreement accepted in the account?
- Location and transfers: confirm the wording for a controller in the United Kingdom whose server is in an EU data centre, and say where the backup copy (the NAS) is kept.
- Speakers' voices: whether a voice copy needs extra wording (for example as special category or biometric data), The public summary of the consent form is now its own page (a draft, like the form).
- Model downloads: whether to mention that the app downloads its models from Hugging Face directly (the volunteer's computer connects there, not through this site), and how.
- Requests through the site's forms (invites, complaints, removal requests): the server deletes a request 30 days after it is answered or dismissed, and an invite request never answered after 180 days; a complaint or removal request is kept until it is closed. Confirm these periods, and say how long the answers stay in the operator's mailbox.
- Requests: the response time to state, how a requester's identity is checked, and a minimum age for volunteers, if any.
- Supervisory authority: confirm the Information Commissioner's Office and the wording of the right to complain.
- Web logs: Caddy records the request headers a browser sends (such as its user agent) with the masked address; confirm, or ask for fewer fields to be logged.
- Version and date of this notice, and how changes are announced.
Who is responsible
LinguaForge and the job server behind it are run by Bob Greenyer, an individual in the United Kingdom, who is the controller of the personal data described here under the UK GDPR and the Data Protection Act 2018.
Contact for anything on this page: through RemoteView.ICU.
If you only read this site
- The public pages set no cookies, run no analytics and load nothing from other sites.
- The web server (Caddy) keeps an access log: the time, the page asked for, the response and the request headers your browser sends, with your IP address masked (an IPv4 address to its first three parts, /24; an IPv6 address to /48). The log is kept for 7 days.
- Links to YouTube take you to YouTube, where YouTube's own terms and privacy policy apply. This site embeds no YouTube player.
If you volunteer
What the server holds about you and your computer:
- A public name (handle), only if you choose one. It is shown only after it is approved; without one you are anonymous.
- The work your computer did: which pieces of which dub it made, when, the voice takes it uploaded, and the hours credited to you once a dub is published. The languages your computer accepts.
- Notes you send after a job. A note is shown only if you mark it public and it is approved.
- Your computer's platform, chip and memory, and, with each piece of work, its operating system version and the app's version. Never its name, your user name or a list of your files.
- The version of the volunteer agreement you accepted.
- Your app's public key and a hash of its access token (never the token itself).
- App logs: for each request the time, a request id, the address on the server it asked for, the result, how long it took and your computer's id. No IP addresses, no contents, no texts and no tokens. Kept for 30 days.
What is not held: the app on the server stores and logs no IP addresses; there are no cookies on the public pages and no analytics. Your e-mail address is held only if you give it in one of this site's request forms (an invite, a complaint or a removal request), with your message and never with your IP address: until the request is answered or dismissed, and for 30 days after that; an invite request never answered is deleted after 180 days, and a complaint or removal request is kept until it is answered. The operator also learns your address if you write through RemoteView.ICU.
What the site shows
For a volunteer with an approved handle: the handle, hours, number of dubs, languages, first and last day, the talks worked on and approved public notes. Never the computer, chip, an id or a time of day. Anonymous volunteers' hours are counted in the totals only.
Why, and on what basis
- Running the pool of computers, crediting work and preventing abuse. Basis for the work: the volunteer agreement (contract). Basis for preventing abuse and for the logs: legitimate interests, in keeping the service secure and fair.
- Showing a public name and public notes. Basis: your consent, which you can withdraw at any time; your hours then count as anonymous.
How long things are kept
These periods are the ones the server's code and its configuration apply.
- A voice take: 7 days after it is judged.
- The encrypted voice clip of a job: deleted when the job is closed or withdrawn, or 7 days after its last piece of work ended.
- The results of a closed job: 30 days.
- An upload that never finished: 1 hour.
- Backups of the database: the last 7 nightly copies on the server, and copies for 90 days on the operator's backup storage. Data deleted on request is therefore gone from every backup within 90 days.
- Web server logs: 7 days. App logs: 30 days.
- Your volunteer record (handle, hours, notes, computer details): kept until you ask for it to be removed.
Speakers' voices
Some dubs copy the speaker's own voice. This is done only with the speaker's separate written consent, which says who may make the dub (volunteers known to the operator, or any registered volunteer), and which the speaker can withdraw at any time. Without that consent a talk is dubbed in another voice.
A volunteer's computer receives a short clip of the voice, encrypted, with the key only while it is working, and the translated text in parts; never the recording of the talk. Published dubs are labelled as an AI-generated voice. The signed consent forms are kept privately by the operator and are never published. What the form says: speakers' consent.
Who else handles the data
- IONOS, which hosts the server (a virtual private server in an EU data centre).
Your rights
- A copy of your data (export), on request.
- Deletion, on request: your credit becomes anonymous, your notes are deleted and your computer's access is revoked. Backups age out as above.
- Correction of anything wrong, and withdrawal of consent for your public name and notes.
To ask, use the removal request form, or contact Bob Greenyer through RemoteView.ICU, as above. You can also complain to the Information Commissioner's Office (ico.org.uk), the UK's supervisory authority.