Privacy Policy

Last updated: 2026-10-13

This service (“Livonian dictionary access”, at https://livonian.valksor.com) is a free, public, read-only tool: a JSON API and an MCP endpoint over a dictionary. It is a valksor.com service.

1. Who is responsible

The controller is SIA Valksor (registration number 40203690663), Mores iela 36-1, Riga, LV-1034, Latvia. For any question or request about your data, write to valksor@valksor.com.

2. No accounts, ads, or tracking

There are no user accounts and no logins. We do not run advertisements, use analytics or tracking tools, or build profiles, and we never sell or share data for marketing. The application sets no cookies of its own. Cloudflare, which sits in front of the service (see “Recipients”), may set a technical security cookie (for example cf_clearance).

3. What we process

Your request. The word or phrase you look up and the query parameters. On a cache miss the text of your query is sent to livonian.tech, the dictionary platform of the University of Latvia Livonian Institute, to fetch the result. Please do not put personal or sensitive information into queries — treat them as public dictionary lookups.

4. Logs and your IP address

No access log. The web server does not write a log line per request, so your IP address, the words you look up and the query strings you send are not recorded in a request log. The application's own log keeps operational messages (start-up, errors and upstream failures). It does not record your queries or IP address, with one exception: a request to the disabled internal path /admin/metrics is logged with its connection details (IP address, user agent and similar headers), because that path is a probe for misuse. Each container's log is capped at about 30 MB and is normally cleared at the nightly restart of the service, so it is usually kept for no more than a day. The legal basis is our legitimate interest in running and securing the service (GDPR Article 6(1)(f)).

Rate limiting. To prevent overload, the server keeps your IP address (IPv6 addresses are reduced to their /64 network) and a request counter in memory. An entry is dropped once its limit has reset, typically within about a minute of your last request. It is never written to disk and is lost when the service restarts.

We also keep aggregate counters (requests, errors and timings) for reliability. They contain no IP address or query text.

5. Caching

To avoid asking the source again and again, we keep the dictionary responses in a cache on our server. The words you look up are stored as cache keys together with the result, but not linked to your IP address or any other identifier. Responses from livonian.tech are kept in the cache without an expiry date, until the size limit below pushes them out. The cache is capped at a fixed number of entries; when it is full the oldest entries are deleted first.

6. Recipients and transfers

• Our hosting provider runs the servers, which are in Germany, in the European Union. It acts as our processor.
• Cloudflare provides the CDN and the secure tunnel to our servers, and protects against attacks. It processes connection data such as your IP address as our processor, and its parent company is based in the United States, so that data may be processed there. See the Cloudflare privacy policy.
• livonian.tech (University of Latvia Livonian Institute) — the source of the dictionary data. It receives the text of your query on a cache miss. We understand its server to be in Germany, in the European Union. It is run independently of us and has its own privacy practices.

The upstream source is contacted by our server, not by your browser: your IP address is not passed on to it, only the query text and a User-Agent naming this service and our contact address. We do not sell, rent, or share data with anyone for marketing.

7. Legal basis

We process this data on the basis of our legitimate interest in providing, securing and protecting the service (GDPR Article 6(1)(f)), limited to the minimum described above.

8. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to access, correct and delete your data, to restrict its processing and to object to it. Because we keep no accounts and no request log, there is normally nothing to retrieve or delete; if you make a request, tell us the approximate time of your visit. You also have the right to lodge a complaint with the Data State Inspectorate (Datu valsts inspekcija) in Latvia, or with the supervisory authority of your own country.

9. Changes

Changes to this policy are published on this page with a new “Last updated” date.