Privacy Policy
Last updated: 10 November 2026
The short version. The Pepperlang extension translates on your computer. The pages you read, the words swapped into them and your word list are never sent to us or anyone else. The extension sends anonymous usage counts that contain none of that (you can turn them off), and we only handle personal data if you buy Pro, contact us, or visit this website, as described below.
1. Who we are
Pepperlang (the "extension" and this website) is provided by [Your full legal name or registered company name], [Street, city, postal code, country] ("we", "us"). We are the controller of the personal data described in this policy. For any privacy question or request, email privacy@pepperlang.com.
2. The extension
What never leaves your computer
- Page text. To choose and translate words, the extension reads the visible text of the page you're viewing. It is processed on your computer by Chrome's built-in translation and language-detection models. It is never sent to us or to anyone else.
- Your word list. Saved words, the words you've seen, looked up or marked as known, their example sentences and the pages you saved them from are stored only in your browser. We cannot see them. You can download a backup, export or delete them in the extension's Settings, and uninstalling the extension deletes them.
What can leave your computer, and where it goes
- Chrome Sync (on by default, can be turned off in Settings). Your settings, the start date of your Pro trial, and per-day counts (how many words you looked up or saved, how many were swapped, how many reviews, and your goal) are stored with Chrome's sync storage, so they follow you to other computers signed in to the same Chrome profile. This data is kept in your own Google account by Google; it is not sent to us. Your word list is not synced.
- Backups. A backup file is created on your computer only when you click "Download backup". It contains your word list and the pages you saved words from, so keep it private. Restoring reads the file on your computer; nothing is uploaded.
- Language models. Chrome downloads its translation models (and, if you choose, Gemini Nano) from Google. That download is handled by Chrome under Google's terms and privacy policy, not by us.
- Pronunciation. By default the extension uses voices installed on your computer. If you turn on "Allow online voices", the single word being spoken is sent to the online voice service your browser uses.
- Anonymous usage stats (on by default, can be turned off in Settings). The extension sends counts of product events to PostHog, our analytics provider, hosted in the EU. An event is a name such as "install", "first word swapped", "daily goal reached", "review limit shown", "Pro page opened" or "snooze", with a few fixed labels: where a prompt appeared, the plan (free, trial or Pro), the extension version, days since install and your language pair. Each install has a random ID so we can count people and retention, which is not linked to your name, email or Google account. Events never contain page text, words or translations, web addresses or site names. We ask PostHog not to store IP addresses or location, and no advertising or profiling is done. When you turn stats off, anything not yet sent is deleted.
- No advertising. The extension contains no advertising code and never shares data with advertisers.
3. Personal data we do process
| When | Data | Why | Legal basis |
|---|---|---|---|
| You buy Pro | Email address, country, the plan bought, transaction and subscription status, received from Paddle | To give you Pro, manage your subscription, and answer billing questions | Performance of a contract |
| You sign in to unlock Pro | Your Google account email address (Google confirms it to us; we never see your password), and a session token | To find your purchase and unlock Pro on your computers | Performance of a contract |
| The extension checks your Pro license (about once a day) | Your session token, license status, and the technical data of the request (IP address, time) | To confirm that Pro is still active and prevent abuse | Performance of a contract; legitimate interest in preventing fraud |
| You link an order bought with another email | The order number and the email it was bought with | To connect that purchase to your sign-in | Performance of a contract |
| Usage stats are on in the extension | Anonymous product events with a random install ID, as described in section 2. No IP address or location is stored | To understand which features help people learn and fix what doesn't | Legitimate interest in improving the product (you can object at any time by turning stats off) |
| You email us | Your email address and what you write | To answer you | Legitimate interest in providing support |
| You visit this website | Technical logs kept by our hosting provider (IP address, browser type, pages requested, time) | To run and secure the website | Legitimate interest in a secure, working website |
| We keep financial records | Transaction records | To meet accounting and tax duties | Legal obligation |
License checks and usage stats never include page text, the words you see or save, or your learning history. We don't sell personal data, and we don't use it for advertising or profiling.
4. Payments and Paddle
Our order process is conducted by our online reseller Paddle.com. Paddle is the Merchant of Record for all our orders. Paddle collects your payment details, billing address and other information needed to process payments, calculate tax and prevent fraud, and does so as an independent controller under the Paddle Privacy Policy. We never receive your full card details.
5. Who receives personal data
- Paddle, as reseller and Merchant of Record, for payments, invoicing, tax and refunds.
- Google, for "Sign in with Google" (only if you use it), and Google Cloud / Firebase, which hosts our license server and its database. Chrome Sync data is held by Google in your own account under Google's privacy policy.
- PostHog (EU hosting), which processes anonymous usage stats on our behalf.
- Service providers that process data on our behalf under contract: website hosting and our email provider.
- Professional advisers, such as accountants and lawyers, where needed.
- Authorities, where the law requires it.
6. International transfers
Our providers may process data outside your country, including outside the European Economic Area and the UK. Where that happens, we rely on an adequacy decision or on safeguards such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum.
7. How long we keep data
- Purchase and subscription data: while you have Pro, then for as long as tax and accounting law requires (usually up to 7 years).
- License-check request logs: up to 30 days.
- Anonymous usage events: up to 2 years.
- Support emails: up to 2 years after the conversation ends.
- Website hosting logs: as set by the hosting provider, usually no more than 30 days.
8. Your rights
Depending on where you live, you can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or send it to you or another service in a portable format. Where we rely on consent, you can withdraw it at any time. Email privacy@pepperlang.com and we'll reply within one month. You can also complain to your local data protection authority. Data that exists only in your browser is under your control, and you can delete it yourself at any time.
9. Security
We keep the data we hold to a minimum, use encrypted connections (HTTPS) everywhere, and limit access to the people and providers who need it.
10. Cookies
This website does not use advertising or analytics cookies. It stores your light or dark theme choice in your browser's local storage, which is never sent to us. When you open checkout, Paddle may set cookies it needs to process payments and prevent fraud; see Paddle's policy.
11. Children
Pepperlang is not directed at children under 13, and we don't knowingly collect their personal data.
12. Changes
If we change this policy, we'll update the date above. If a change is significant, we'll also announce it in the extension's release notes or by email to Pro customers.
13. Contact
[Your full legal name or registered company name], [Street, city, postal code, country]. Email: privacy@pepperlang.com.