LogoIPAtranslator
  • Pricing
  • Blog

Why IPAtranslator

  • No credit card required to start
  • Standard dictionary IPA is always free
  • Cancel or change plans anytime from your billing page
  • Questions? support@ipatranslator.com
LogoIPAtranslator

Translate English text into standard and spoken IPA.

Tools
  • IPA Translator
  • English to IPA Converter
  • Phonetic Spelling Generator
  • Pronunciation Practice
  • Type IPA
  • Features
  • Pricing
  • FAQ
Company
  • About
  • Blog
  • Contact
Legal
  • Cookie Policy
  • Privacy Policy
  • Terms of Service
  • Refund Policy
© 2026 IPAtranslator. All Rights Reserved.

Privacy Policy

How IPA Translator collects, uses, and protects your personal data

2026/08/05

Effective date: August 5, 2026 Contact: support@ipatranslator.com

Summary

  • We are an independent, developer-run service. We collect only the data needed to run IPA Translator: your account, your usage, and the text you ask us to process.
  • Text submitted through AI-assisted features is sent to OpenRouter, which routes it to third-party model providers to produce a result. We do not store it unless you explicitly create a share link.
  • We do not sell your personal data, and we do not show ads.
  • You can export or delete your data yourself at any time in Settings → Security.

This summary is provided for convenience. The full policy below is the authoritative version.

1. Who We Are

IPA Translator ("we", "us", "the Service") is an online tool that converts text into International Phonetic Alphabet (IPA) transcriptions, provides spoken-style transcription and text-to-speech audio, and offers related learning features. IPA Translator is an independent online service. Questions about the Service or this policy can be sent to support@ipatranslator.com.

2. Data We Collect

2.1 Account data

You can create an account with Google sign-in or with an email sign-in link. We store your name and email address. If you use Google sign-in, we also receive your profile picture from Google. When you subscribe, we store the payment and subscription identifiers needed to apply your plan and reconcile payments.

2.2 Session and security data

Each sign-in session stores your IP address and browser user agent (session table). We use this to keep your account secure and to prevent abuse. Sessions expire after 7 days.

2.3 Text you submit for processing

Text you enter for IPA transcription, spoken-style transcription, or text-to-speech is processed as follows:

  • Dictionary-based transcription runs on our own server against a local pronunciation dictionary. Your text is not sent to any third party.
  • Spoken-style transcription sends the text submitted for that feature to OpenRouter, which routes it to third-party model providers to resolve pronunciation ambiguities in context.
  • Text-to-speech uses your browser's built-in speech synthesis.

We do not store your submitted text after the result is returned, except when you explicitly create a share link (see 2.4).

2.4 Share links (optional)

If you create a share link, the source text and its transcription snapshot are stored so the link can render. The public link automatically stops being available after 7 days. This does not itself delete the stored share record or snapshot. The record is retained until you delete your account, at which point it is deleted with the account.

2.5 Support messages and Share reports

When you voluntarily contact support, including to report a Share link, we collect your email address and the information you include, such as a Share URL and reason for your report. We use it to respond, investigate, enforce these Terms, and prevent abuse.

2.6 Visitor identity

Guests can use limited features without an account. We set a signed, HttpOnly cookie (ipa_visitor_id, 90 days) containing a random identifier. Only an HMAC hash of that identifier is stored in our database — the raw identifier is never stored and cannot be recovered from the hash.

2.7 Payment data

Card details and billing information are collected and processed directly by our payment processors — we never see or store your full card number. We store only the payment metadata needed to run your plan: product/plan purchased, payment status, customer and subscription IDs, and period dates.

2.8 Newsletter data

If you opt in to the newsletter at registration, we store your email address, your opt-in status, and the timestamp of your consent. If you subscribe through our public form, we use double opt-in: we email you a one-time confirmation link (valid 48 hours) and add you to the list only after you confirm. We keep a record of each confirmation request (email, request and confirmation timestamps, expiry, and status) to operate that double opt-in process. A confirmed request is evidence of consent; pending or revoked requests are not. Every marketing email contains a one-click unsubscribe link, and unsubscribing immediately revokes any unused confirmation links for your address.

2.9 Analytics and regional consent

We use Umami, a privacy-focused, cookieless analytics tool that does not track individual users or set cookies. It provides aggregate statistics that we use to improve the Service.

We also use Google Analytics 4 (GA4) for page views, traffic-source measurement, and aggregate product-usage analysis. Our current GA4 implementation does not send submitted transcription text, email addresses, account IDs, or custom user-identifying fields as analytics event properties. We do not currently use Google Ads conversion tags, remarketing, Google Signals, or advertising cookies.

For visitors in the EEA, the United Kingdom, or Switzerland, GA4 is not loaded until the visitor accepts Google Analytics through the consent banner or Cookie settings interface. For other known regions, GA4 currently loads according to our regional analytics policy unless the visitor has explicitly rejected Google Analytics. Every visitor can change or withdraw this Google Analytics choice through the persistent Cookie settings control. If the region cannot be determined, we use the consent-required path.

To apply this regional flow, the application calls its own /api/geo route, which reads the country code supplied by our hosting platform, Vercel. We do not send the visitor's IP address to a separate IP-geolocation API, and the application does not store the raw IP for this purpose. Vercel may process request metadata, including IP address, under its own privacy policy.

3. How We Use Your Data

We process personal data for the following purposes:

  • To provide the transcription, audio, and account features you request: contract performance.
  • To operate the credits system and your subscription: contract performance.
  • To send service-related email, including sign-in, security, billing, and support messages: contract performance or legitimate interests.
  • To prevent abuse, fraud, and security incidents: legitimate interests.
  • To send the newsletter: your consent.
  • To produce aggregated, non-identifying usage statistics through cookieless Umami and GA4. Where consent is required, GA4 is processed only after Google Analytics consent; otherwise the current regional analytics policy applies.
  • To comply with legal obligations: legal obligation.

4. Third Parties That Process Your Data

ProviderPurposeData they receive
Waffo PancakePayment processing and billingEmail, purchase details, payment method
ResendNewsletter and service email deliveryEmail address
OpenRouter and its model providersAI-assisted text processingText submitted through applicable features
GoogleSign-in (OAuth)Your Google basic profile
Google AnalyticsWebsite analyticsPage views, referrers, traffic-source information, and standard analytics/device data generated by the browser
VercelHostingRequest logs (may include IP address)
NeonDatabase hostingAll data stored in our database, at rest

Each provider processes data under its own privacy policy and, where offered, a data processing agreement. We do not use your data for advertising.

5. Data Retention

DataRetention
Account dataUntil you delete your account
Session records (IP, user agent)Each session is valid for 7 days
Submitted textNot stored (see 2.3)
Share linksPublic availability ends after 7 days. The stored share record is retained until you delete your account, at which point it is deleted with the account.
Support messages and Share reportsOnly as long as reasonably necessary to respond, investigate, enforce these Terms, and prevent abuse, and to document the outcome, unless a longer period is required by law.
Visitor identity90 days (cookie lifetime)
GA4 analyticsAccording to the retention settings configured for our GA4 property and Google's applicable retention rules
Credit ledgerUntil you delete your account
Payment recordsFinancial records may be retained by the active payment provider as required by tax law, even after account deletion
Newsletter consent recordCurrent opt-in status is cleared when you unsubscribe; the timestamp of your most recent consent is kept as evidence until you delete your account

6. Your Rights (GDPR / UK GDPR)

If you are in the EEA or UK, you have the right to:

  • Access your personal data — self-serve export in Settings → Security
  • Rectify inaccurate data — edit your profile or contact us
  • Erase your data — self-serve deletion in Settings → Security (deletes your account and associated data from our database immediately)
  • Data portability — the export function provides your data in JSON
  • Restrict or object to processing — contact us
  • Withdraw consent at any time (e.g., unsubscribe from the newsletter via the link in every email) — this does not affect prior lawful processing
  • Withdraw analytics consent at any time through the persistent Cookie settings control
  • Complain to your local data protection authority

For any request you cannot complete self-serve, email support@ipatranslator.com. We respond within 30 days.

7. California Residents (CCPA/CPRA)

We collect the categories of personal information described in Section 2. We do not sell or share your personal information for cross-context behavioral advertising, and we do not discriminate against you for exercising your rights. California residents may request access, correction, deletion, or Google Analytics opt-out through Cookie settings or support@ipatranslator.com.

8. International Data Transfers

Our subprocessors are located in the United States and other countries. When your data is transferred internationally, it is protected by the transfer mechanisms those providers offer (such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses).

9. Children's Privacy

The Service is not directed at children under 13, and we do not knowingly collect data from them. In the EEA and UK, you must be at least 16 (or have parental consent) to create an account. If you believe a child has provided us personal data, contact us and we will delete it.

10. Data Security

We use HTTPS for all traffic, secure authentication sessions, signed HttpOnly cookies for visitor identity, and we never store card numbers. No method of transmission or storage is 100% secure; if a breach affects your data, we will notify you and the relevant authorities as required by law.

11. Changes to This Policy

We will post any update on this page with a new effective date. For material changes, we will notify registered users by email before the change takes effect.

12. Contact

Questions about this policy or your data: support@ipatranslator.com, or via our contact page.