LingoLark Privacy Policy

Last Updated: October 5, 2026

Welcome to LingoLark. This Privacy Policy explains how LingoLark ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our website (https://lingolark.com), our browser extensions (including "LingoLark"), and all associated language learning services (collectively, the "Services").

We are committed to protecting your privacy and ensuring a secure experience across all of our tools.

1. Information We Collect

To provide contextual translation and custom vocabulary tracking, we collect or process the following types of information:

1.a. Account Identity Data: When you create an account or sign in -- with an email address and password, or with Google Single Sign-On (SSO) -- we collect your email address and, for Google sign-in, your name and profile picture, to securely manage your account via our identity provider (Supabase). You sign in on our website; if the LingoLark extension is installed in the same browser, the website hands it your session so you are signed in to both.

1.b. Translation & Text Input: How your selected text and prompts are processed depends on the AI engine you choose. With a local engine (Ollama, Chrome Nano) or manual entry, text selections and prompts are handled on your machine and are not sent to our servers for translation. With LingoLark Cloud, the selected text and prompt are transmitted securely to our servers and forwarded to our third-party inference provider (see Section 4.e) solely to execute your requested translation or AI assistance.

1.c. Saved Vocabulary: To prevent data loss, signed-in accounts have their saved vocabulary and phrases -- including the address (URL) of each page a word was saved from -- stored on our servers automatically, so your list is available wherever you're signed in. To show the words you saved from the page you're viewing, the signed-in extension sends that page's URL to our servers to look them up. This only happens on tabs where you've used the extension (for example by clicking its toolbar icon or saving a word there); the lookup URL is not added to your vocabulary, though it may appear in our infrastructure's routine request logs.

1.d. Usage & Analytical Data: We collect usage events to understand which features help learners and where new users get stuck. On our website and documentation site, this includes the pages you visit, which of our buttons you click (for example "Start free"), and steps such as signing up, picking a study language, saving a word, or using LingoLark Cloud, along with general technical details (browser, device type, approximate location derived from your IP address, and the site that referred you). The extension reports when it is installed, when it is signed in, and when a word is saved, with the AI engine used. Once you are signed in, these events are linked to your account's internal ID (a random identifier, not your email or name); before that, to a random identifier stored in your browser. We never send the text you read or select, the words you save, the addresses (URLs) of pages you use the extension on, or your email address to our analytics providers.

1.e. Send to Reader (same device): When you choose Send to LingoLark reader from a page selection, the selected text is copied to extension storage on this browser and handed to the official LingoLark web app on the same machine so you can open it in the Reader. That hop does not upload the passage to our servers and does not write it to your saved vocabulary. The passage is stored in the account only if you later click Save passage in the Reader.

1.f. Contact Form: When you send us a message through our Contact form, we collect the name, email address, and message you enter (when you are signed in, your account email is used) and deliver them to our support inbox by email, solely to respond to you. To keep automated spam out, the form runs a bot check from Cloudflare (Turnstile), which processes technical signals such as your IP address.

2. How We Use Your Information

2.a. Service Provision: To authenticate your identity, keep your saved vocabulary in sync across your devices (including looking up the words saved from the page you're viewing), and -- when you choose LingoLark Cloud -- process requested contextual translations and AI assistance through our servers. Local engines do not route your text through our AI services.

2.b. Analytics & Improvement: To evaluate extension and website performance, diagnose technical bugs, determine which features are most popular, and see which onboarding steps help new learners get started (see Section 1.d).

2.c. Aggregated Feature Insights (Future Services): We may aggregate completely anonymized vocabulary metrics to provide community features, such as system-wide statistics (e.g., displaying language trends or widely saved terms). This aggregated data contains zero personally identifying information.

2.d. Commercial Integrity: We do not sell, rent, or trade your personal or processed linguistic data to any third-party advertisers or brokers. Your data is strictly utilized to power the core LingoLark extension and its official related web applications.

3. Data Storage and Retention

3.a. Storage Location: Your account profile, saved vocabulary, and metadata are securely processed and stored using distributed cloud infrastructure providers (including Supabase and secure hosting environments). For LingoLark Cloud, we also keep an AI credit ledger for your account (credit grants and per-action spends with timestamps). The ledger records that an action happened; it does not store the text of your prompts or the AI replies.

3.b. Local Browser Storage & Cookies: Our website and documentation site set analytics cookies and browser storage (from Google Analytics and PostHog) to recognize a returning browser and to link your visits before and after you sign up. The extension utilizes standard browser local storage capabilities (such as localStorage or chrome.storage) to manage your vocabulary lists, preferences, translation configurations, and (when you use Send to LingoLark reader) a short-lived copy of that selected passage so the official web app can show it in an inbox. When you're not signed in, this data stays on your machine. Once you're signed in, your account's copy on our servers is the primary one: the extension keeps only the words saved from the page you're viewing in local storage, refreshed automatically, and clears your account's words from this browser when you sign out.

3.c. Data Retention: We retain your account data, saved vocabulary, and AI credit ledger for as long as your account remains active. Google Analytics data is kept for up to 14 months; usage events in PostHog are kept only as long as needed to understand trends. You can delete your account at any time from Settings on our website, which permanently purges your records from our live databases (including your saved vocabulary and the AI credit ledger). An installed extension then signs out; the words saved from the page you had open in it stay in that browser's local storage as guest words until you delete them or uninstall the extension.

4. Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We only share information with trusted service providers to operate the extension, protect our system, and deliver your requested features.

4.a. Essential Service Providers: We partner with third-party infrastructure providers to run core features. This includes Supabase for secure user authentication and account database management, Cloudflare (Turnstile) to protect our sign-in and contact forms against bot traffic and automated abuse, Resend to deliver account emails (such as confirmation and password-reset messages) and Contact form messages, and -- when you use LingoLark Cloud -- OpenRouter and the upstream model host to run the inference request.

4.b. Analytics & Processing: The usage data described in Section 1.d is processed by Google Analytics (Google LLC) and PostHog (PostHog Inc., US-hosted) on our behalf, solely to evaluate feature performance and improve the Services. Extension events reach PostHog through our own servers. We do not use these providers for advertising. When you use LingoLark Cloud, your input text is transmitted to our AI proxy and then to the inference provider solely to return the requested translation or assistance.

4.c. Chrome Web Store Limited Use Compliance: LingoLark's use and transfer to any other app of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not use or transfer user data to serve advertisements, track users across external sites, or profile individuals.

4.d. Legal & Compliance Disclosures: We may disclose your information if strictly required to do so by law, court order, or to protect the safety, rights, and security of our users and the general public.

4.e. Cloud AI Inference (OpenRouter): LingoLark does not use Cloud prompts or replies to train our own models. When you use LingoLark Cloud, we send the selected text and the prompt to our servers, then to OpenRouter and the upstream model provider. OpenRouter states it does not train on your inputs; it still forwards them to the model host. If Cloud is routed through a free / zero-price OpenRouter model, that upstream provider may log your prompts and completions and use them to train or improve their models. Do not send secrets, credentials, or sensitive personal text on that path. Local Ollama and Chrome Nano do not take this hop.

5. Your Data Protection Rights

Under applicable global data protection laws, you possess specific rights regarding your personal information. Depending on your primary location, these rights include:

5.a. Right of Access & Portability: The right to request copies of your personal data or ask that we export your data files directly to you or another organization.

5.b. Right to Rectification: The right to request that we correct any profile information you believe is inaccurate, or complete details you believe are incomplete.

5.c. Right to Erasure ("Right to be Forgotten"): The right to request that we permanently delete your personal data, saved vocabulary, and AI credit ledger, subject to certain legal conditions.

5.d. Right to Restrict or Object to Processing: The right to object to our processing of your personal data, or request that we temporarily restrict how we handle it under certain circumstances.

5.e. How to Exercise Your Rights: To exercise any of these choices -- including permanently purging your data -- you can directly delete your account from Settings on our website (which also purges your saved vocabulary and AI credit ledger), delete individual saved words in the extension or web app (an Undo is offered for a few seconds, after which the deletion is permanent), or sign out of the extension to clear your account's words from that browser. To limit analytics on our websites, you can block or clear cookies in your browser, use a content or tracker blocker, or install Google's Analytics opt-out add-on; you can also ask us to delete the usage events linked to your account. You may also contact us for assistance at support@lingolark.com, and we will process your request within standard regulatory timelines.

6. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our extension features, operational practices, or legal requirements. When updates are made, we will revise the "Last Updated" date at the beginning of this document. We encourage you to review this page periodically to stay informed about how we protect your personal information.

7. Contact Support

If you have any questions, compliance concerns, or feedback regarding this Privacy Policy or our data handling practices, please reach out to us directly: