How we store BYOK translation API keys

When you save a DeepL or Google Cloud Translation key, YuzuLingo stores it encrypted on your account. We decrypt it only to call that provider for Translate. After save, the UI never shows the full key again — only that a key is saved and an optional last-four hint.

Open Translation settings

Prerequisites

You are signed in on Settings → Translation.

Steps

1
What we store
- Ciphertext for the key on your account, plus a short masked hint after save.
- Your preferred engine (hosted Microsoft, DeepL, or Google).
2
What we never do
- Return the full key in the app, GraphQL, or support dumps.
- Put the key in URLs, localStorage for Translate BYOK, or analytics events.
3
Clear or revoke
- Clear the key on Settings → Translation anytime.
- Also revoke the key at DeepL or Google if you leave YuzuLingo or suspect a leak.

Updated Nov 4, 2026