LexiCarta

Privacy

Last updated 19 October 2026

Who we are

LexiCarta (lexicarta.com) is responsible for your personal data under the UK General Data Protection Regulation and the Data Protection Act 2018. You can reach us at [email protected].

The short version

What we process, and why

Visiting the site

Every request passes through Cloudflare, which delivers and protects the site. To do that it processes your IP address and technical details of the request, and it may set a strictly necessary security cookie to tell people from automated abuse. Our own server keeps a log of requests for 14 days to keep the site secure and working; it sees Cloudflare's addresses rather than yours. Our lawful basis is our legitimate interest in running a secure, reliable website.

Visitor statistics (only if you accept)

When you first visit, we ask whether we may count your visit with Google Analytics. If you decline, or ignore the question, Google Analytics is not loaded and nothing is sent to Google. If you accept, Google Analytics records the pages you visit, the page that sent you here, your approximate location (from your IP address, which Google does not store), and your browser, device and screen size. It stores a random identifier in two cookies, _ga and _ga_0YR09B2DY2, for up to 13 months, so a return visit is not counted as a new visitor. We use this only to see which pages people find useful and how they reach us. Google keeps the detailed data for 2 months. Advertising features are switched off: nothing is used to show you adverts. Our lawful basis is your consent.

You can change your mind at any time with Cookie settings at the bottom of every page. Declining after accepting switches Google Analytics off and deletes its cookies. Your choice is kept in your browser's local storage, not sent to us, and we ask again after a year. Embedded maps on other websites never load Google Analytics.

Searching and sharing

The words you search for are not stored against anything that identifies you. Like any page address, a search may appear in the short-lived logs above. A shared link contains only the word and how the map was set up.

The API waitlist

You join the waitlist by emailing us, so we receive only what your email contains: your address and whatever you choose to write. We use it only to tell you about access to the LexiCarta API, and delete it when the API opens to the waitlist, or sooner if you ask. Our lawful basis is your consent, which you can withdraw at any time by writing to us.

Emailing us

If you write to us, we use your message and address only to reply, and delete them once the conversation is over, unless we need to keep them for a legal reason.

Who else handles your data

We use a small number of service providers, each bound to process data only on our instructions:

We do not sell your data or share it with anyone for advertising.

International transfers

Some of these providers are based in, or process data in, the United States. Where data leaves the UK, it is protected by safeguards recognised under UK law, such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.

Your rights

You have the right to ask for a copy of your personal data, to have it corrected or deleted, to restrict or object to how we use it, and to withdraw your consent. Write to [email protected] and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Children

The dictionary is for everyone. The API waitlist is intended for people aged 13 and over.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top.