Privacy policy
Last updated 26 September 2026
Who we are
Truncly is run by an individual, Mahmoud Shayeb (Tulkarm, Palestine), who is the controller for personal data processed on this website ("we"). Contact: [email protected].
What we process and why
- Text you check. Sent to our servers to measure it and returned immediately. Anonymous checks are not stored. (Art. 6(1)(b) GDPR — providing the service you ask for.)
- Account data. Email, name, password hash, plan and usage counts, so you can sign in and we can apply plan limits. (Art. 6(1)(b).)
- Saved content. Snippets, share links, custom surfaces and uploaded files, stored until you delete them or your account. Share links are public to anyone who has the link.
- Payments. Paddle.com is our reseller and merchant of record: it processes payments, issues invoices and handles sales tax. We never see card numbers; we keep your Paddle customer id and subscription status. (Art. 6(1)(b) and (c) — tax records.)
- Security logs. IP address and request metadata for abuse prevention and rate limiting, kept for up to 14 days. (Art. 6(1)(f) — legitimate interest in keeping the service safe.)
AI features
When you use AI rewrites or translations, only the text being processed (plus your must-keep phrases and brand) is sent to our AI provider. It is not used to train models.
Cookies
We use one essential cookie to keep you signed in. No analytics or advertising cookies, so there is no cookie banner. The checker may keep an unsent draft in your browser’s local storage.
Processors
| Service | Purpose | Location |
|---|---|---|
| Paddle | Checkout, payments, invoices, refunds and sales tax (merchant of record) | UK / EU / USA (SCCs) |
| Anthropic | AI rewrites and translations — only the text being processed | USA (SCCs) |
| Mailjet (Sinch) | Account emails: sign-up confirmation and password reset | EU (France / Germany) |
| Oracle Cloud Infrastructure | Server and database hosting | EU (Frankfurt) |
| Cloudflare | DNS, TLS, DDoS protection and secure tunnel to the server | Global edge (SCCs) |
Retention
Account data is kept while your account exists. Deleting your account (Settings → Delete account) permanently removes it and everything linked to it. Invoices are kept as long as tax law requires.
Your rights
You can access, correct, export or delete your data, object to processing, and complain to your data protection authority. Email us and we’ll respond within 30 days.