Privacy Policy

This Privacy Policy explains how LangClip (“LangClip,” “we,” “our,” or “us”) collects, uses, and protects personal information in connection with the website at app.langclip.com and the LangClip browser extension (together, the “Service”). The extension is distributed via the Chrome Web Store and works in Chromium-based browsers that install from it, including Google Chrome and Brave; a native Microsoft Edge listing (via Edge Add-ons) is planned. References to “the extension” or “the browser” apply equally to any supported browser. By using the Service, you acknowledge and agree to this Policy.

We are committed to protecting your privacy and handling your data responsibly. We uphold the principles of transparency, legitimate purpose, and proportionality in all data processing activities, in accordance with applicable data protection laws.

We may collect and process the following types of information:

• Account Information: your email address, supplied by Clerk when you sign up or sign in. We do not store your password — Clerk handles authentication on our behalf.
• Payment Information: processed securely by Lemon Squeezy (our Merchant of Record). We do not access or store your payment card details.
• Saved Phrases and AI Analyses: the subtitle text you choose to save from YouTube, the source video’s title, channel, and URL, and the translation / vocabulary / grammar analysis generated for each phrase.
• Flashcard Review State: the spaced-repetition schedule for cards you create, including review counts, ease factor, and due dates.
• Usage Counters: how many analyses you have used in the current period (for quota enforcement).
• Extension Tokens: when you connect a browser, we generate an opaque token. We store only its SHA-256 hash on our server; the plaintext lives only in your browser’s extension storage.
• Error Reports: stack traces and request metadata captured by Sentry when an unexpected error occurs. We redact the content of saved phrases from error reports.
• Automatically Collected Access Data: when you use the Service, our hosting infrastructure and authentication provider record standard server-log data such as your IP address, request timestamps, and User-Agent header. This data is retained for a limited period and is used to secure the Service, diagnose outages, and enforce rate and abuse limits. It is not linked to your saved phrases and is never used for advertising or analytics profiling.

We collect only the data necessary to operate, secure, and improve the Service.

We use personal data solely for legitimate business purposes, including to:

• Provide, operate, and improve the Service
• Process payments and manage subscriptions through Lemon Squeezy
• Send service-related updates, support, and policy notifications
• Enforce quota limits and prevent abuse of the free trial plan

We do not sell, rent, or trade your personal information.

Advertising (Reserved for the Future)

The Service does not currently display advertising. We reserve the right to introduce non-personalized, contextual advertising for users on the free trial plan in the future — for example, language-learning-related placements chosen based on the language pair you are studying rather than on your identity, saved phrases, browsing history, or Plus subscription status. Paid plans will remain ad-free. If we introduce advertising, we will update this Policy and notify signed-in users in advance via the dashboard, the Service website, or email.

We rely on trusted third-party providers to operate securely and efficiently:

• Clerk — authentication and account lifecycle
• OpenAI — AI analysis (translation, grammar notes, patterns)
• Lemon Squeezy — payment processing, tax handling, and compliance (Merchant of Record)
• Vercel — application hosting and edge delivery for app.langclip.com
• Neon — managed Postgres database (US region) for user accounts, saved phrases, and flashcards
• Sentry — error monitoring for the web app and browser extension, with phrase content redacted before events leave your browser or our server
• Google Analytics — aggregated usage analytics (page views, feature interactions) for the marketing website and web app only; the browser extension does not load Google Analytics. IP addresses are anonymized by Google’s default configuration. We do not enable advertising features, remarketing audiences, or cross-site tracking. You can opt out via Google’s Analytics Opt-out Browser Add-on.

These providers process data under their own compliance and may operate internationally. Please review the named providers’ respective privacy policies for details.

How OpenAI Sees Your Data

When you save or explain a phrase, the phrase text and a small context window are sent to OpenAI from our server, authenticated with our own API key. OpenAI’s API terms state that data sent via the API is not used to train their models.

We use cookies and similar technologies to operate the Service. Cookies are small text files stored on your device by your browser.

Types of Cookies We Use

• Essential Cookies: required for the Service to function properly, including the Clerk session cookie used for authentication. These cannot be disabled.
• Extension Local Storage: the browser extension stores your language pair, any phrases queued for sync, and the extension token in chrome.storage.local. This data never leaves your browser unless you trigger sync.
• Analytics Cookies: the marketing website and web app load Google Analytics, which sets _ga and _ga_* cookies to measure aggregate usage. These cookies do not identify you personally to us and are not used for advertising or remarketing. The browser extension itself does not set or read analytics cookies.

We do not use advertising cookies, fingerprinting, or cross-site tracking. You can manage cookies through your browser settings, or opt out of Google Analytics specifically via Google’s Analytics Opt-out Browser Add-on. Note that disabling essential cookies may affect the functionality of the Service.

Why the Browser Extension Requests Each Permission

• storage — persist your language pair, extension token, and the local phrase queue between browser sessions.
• activeTab — inject the sentence panel and Save button into the YouTube tab you are currently viewing, only after you interact with the extension.
• scripting — register the content scripts that render the sentence panel and analysis overlay on YouTube pages.
• Host permission https://www.youtube.com/* — read the subtitle track URL that YouTube already ships to the browser (via ytInitialPlayerResponse) so we can render clickable, timed sentences under the player. We do not download videos, strip ads, or modify YouTube’s own login or monetization surfaces.
• Host permission https://app.langclip.com/* (and dev.app.langclip.com for pre-release testing) — exchange the extension token during sign-in and sync saved phrases in the background.
• Host permission https://api.openai.com/* — reserved for administrative testing paths in the extension. In normal use the extension never talks to OpenAI directly; all analysis requests go through our server.
• Host permission https://*.ingest.sentry.io/* — send error reports to Sentry so we can diagnose crashes. Saved phrase content is redacted before events leave your browser.

All communication between the browser extension, the web application, and our backend is encrypted in transit using HTTPS/TLS. Data at rest lives in encrypted managed databases and in the browser’s own encrypted extension storage on your device. Extension tokens are stored on our server only as a SHA-256 hash; the plaintext never leaves your browser after the initial handshake. We apply industry-standard technical and organizational safeguards, though no method of internet transmission or storage is completely risk-free.

Chrome Web Store Limited Use Compliance

LangClip’s use of information received from Google APIs (including any data accessed through the browser extension) adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. When the extension is distributed through other stores (for example, Microsoft Edge Add-ons), we also comply with the equivalent user-data policies of those stores. In particular, we do not: use or transfer your data for serving advertisements (personalized, retargeted, or otherwise); allow humans to read your data except with your explicit consent, for security investigations, or where required by law; or use your data for any purpose other than providing and improving LangClip’s language-learning features.

Protection of Phrase Content in Error Reports

Our error-monitoring integration includes a redactor that strips saved phrase content from event payloads, breadcrumbs, and extras before they leave your browser or our server. While automated redaction is applied, we still recommend not saving highly sensitive personal information as a saved phrase as an added precaution.

We retain personal data only as long as necessary for the purposes outlined in this Policy or as required by law. You may request account or data deletion at any time from Settings or by contacting us.

• Account data: saved phrases, analyses, flashcards, and review history are retained until you delete your account (Plus accounts also retain data if you cancel and let the subscription expire).
• Backups: Neon retains automatic point-in-time backups for a rolling window (currently 7 days on our plan). Deletions propagate to backups as the window rolls forward.

Email Retention for Trial Plan Eligibility

To prevent abuse of the trial plan through repeated registrations, we retain email addresses for 60 days after account cancellation or deletion. During this window, if the same email re-registers, the previous trial usage carries over. The email address is stored solely for enforcing trial plan eligibility and is never used for marketing or other communications. After 60 days, it is automatically and permanently deleted from our system.

We send essential service-related communications (such as account notifications, security alerts, billing, and policy updates) without requiring separate consent, as these are necessary for the operation of your account.

We also send occasional promotional emails (such as new features and offers). If you do not wish to receive these, uncheck “Receive product updates and offers by email” in the Email preferences section of your dashboard settings. Due to processing delays, you may still receive a small number of promotional emails for a short period after unchecking the box.

Subject to applicable data protection laws, you may have the right to:

• Be informed about how your data is collected and used
• Access and obtain a copy of your personal data
• Object to or withdraw consent for certain processing activities
• Request correction of inaccurate information
• Request deletion of your personal data
• Lodge a complaint with a relevant data protection authority

You can exercise most of these rights directly: download a copy of your data and delete your account from Settings, or update your email via the Clerk account portal. For anything else, email support@langclip.com.

Your data may be transferred to and processed in countries where our servers or third-party providers are located, primarily the United States. We take appropriate measures to ensure such transfers comply with applicable data protection laws and maintain adequate safeguards for your personal information. We rely on each sub-processor’s published DPAs and Standard Contractual Clauses as the legal basis where applicable.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The updated version will be posted on this page with its effective date. For changes that materially affect how we use existing data, we will provide notice at least 14 days before the change takes effect through reasonable means, which may include the dashboard, a banner on the website, or email. Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.

This Privacy Policy is governed by the same terms regarding governing law and dispute resolution as set forth in our Terms of Service.

Nothing in this Privacy Policy shall prevent you from exercising your rights under applicable mandatory data protection laws before the courts of your habitual residence or place of work.

Privacy questions, data requests, or complaints: support@langclip.com.