Privacy Policy

Last updated: November 6, 2026

This policy describes how Ilies Allali (“Patchou”, “we”, “us”) handles data in relation to Page Translator for Webflow and the patchou.cloud website. Our website pages are static. The only data we process is described below.

What we collect

When you purchase a Pro license through Polar, they collect your name, email, and payment information. We receive your email and license key to activate your purchase. We do not store payment details.

Page Translator for Webflow

When you authorize the app on Webflow, our server receives an access token for each site you allow. It keeps the token encrypted and uses it only to add, update and remove the app's scripts, to read your published pages so interactions carry over to translated pages, and, when your site uses Webflow Localization, to read the text of the pages and components you translate and write their translations into your site's locales. That text goes through our server without being stored. For each site we also keep the site short name, its published domains, the IDs of the scripts the app registers, the IDs and languages of the pages it translates with their source pages, and the license bound to the site: the license key encrypted, a SHA-256 fingerprint of it, and the date of the last check with Polar. The Designer identity token that the app sends with each request is checked with Webflow and kept in our server's memory for at most 14 minutes.

• Page text is sent for translation to our Instant service, which uses Anthropic's Claude model, or to DeepL through our relay when you use your own key. We don't keep the text. The Instant service logs, for each request, the identifier described below, character and token counts, cost and status, and keeps a daily request count per IP address, to apply quotas.
• Your DeepL key and license key are kept in the app's memory and forgotten when you close it. They are saved in your browser's local storage only if you tick "Remember on this device", and removed when you untick it, clear the key or remove the license. The DeepL key is sent to DeepL through our relay (deepl.patchou.cloud), which neither logs nor keeps it. The license key is sent to our server, which checks it with Polar and keeps it to count your monthly Instant characters.
• Instant requests carry a random identifier (ptw-…) created on your first translation and saved in your browser, under the key ptw_distinct_id. It contains nothing about you or your site. Our server keeps it with the date of your free translation, so the free translation can be used once. That counter is kept for 12 months, then deleted, and the free translation becomes available again for that identifier. Request logs keep the identifier, character and token counts, cost and status for 31 days, never the texts. Clearing the app's site data creates a new identifier. To have your stored records deleted before that, email pro.allali.ilies@gmail.com with your identifier, and we delete them.
• The Webflow app sends no analytics.
• On your published pages, the language switcher runs a script from api.patchou.cloud, our server, and loads its flag images from flagcdn.com. Your visitors' browsers therefore send their IP address and browser details to both services when they load a page that has the switcher.

How the tokens are stored and deleted. Tokens are stored only on our server, never in your browser or in the app, and are encrypted at rest with AES-256-GCM. The encryption key is kept apart from the data. As soon as Webflow stops accepting a token, our server deletes it, either on its next request or during the check it runs on every installation each day, so within 24 hours at most. Webflow does not tell the app when it is uninstalled, and in our test it still accepted the token after an uninstall: the token is then kept until Webflow refuses it. When a token is deleted, we keep the IDs of the pages the app wrote to, without the token, for 180 days, so that the app can remove its scripts if you install it again. To remove the app cleanly, remove its scripts from the app menu, publish your site, then uninstall the app in Apps & Integrations. Email us if you want the stored token and site data deleted sooner, and we will delete them by hand.

Third parties

• Polar processes payments and manages licenses. Their privacy policy applies to checkout: polar.sh/legal/privacy
• Webflow hosts your site and the Designer in which the app runs. Their privacy policy applies to your use of Webflow.

Cookies

patchou.cloud does not use cookies for advertising or tracking. Polar may set cookies during checkout on their domain.

Data retention

Your email and license key are kept as long as your license is active, to provide support and validate activations. For the translation relay used by Page Translator for Webflow, the counter of free translations is kept 12 months, request logs 31 days, daily counters per IP address 2 days, the license check cache 31 days, and the monthly Instant character count per license key 2 months. On the relay, these records hold the license key in clear. Each period is applied by a daily cleanup. You can request deletion at any time by email.

Your rights

You can request access to, correction of, or deletion of any personal data we hold. Contact us and we will respond within 30 days.

Contact

For any privacy-related questions: pro.allali.ilies@gmail.com