Privacy Policy

1. Scope

This policy explains how the Lingo Nugget Chrome extension and its companion service at lingonugget.com handle information. By using Lingo Nugget, you acknowledge the practices described here.

2. Information we handle

What happens while you browse

Before page processing begins, the extension shows an in-product disclosure and requires you to choose “Agree and enable.” Until you agree, it remains inactive on webpages.

The extension reads page text locally so it can identify and annotate useful vocabulary. This may include visible message text on webmail or chat pages. It skips form inputs and text areas. Simply visiting a page does not cause the extension to send the full page to our service.

When you request a translation, pronunciation, or contextual meaning, the selected text and relevant sentence context may be sent to our service. When you save a word or phrase, its translation, surrounding sentence, and full source URL—including any query string or fragment—may be stored locally and synced to your account. Words you mark as mastered may also be stored locally and synced to your account as a familiar-words list.

Avoid selecting or saving passwords, API keys, private messages, financial details, health information, or other confidential material. Lingo Nugget attempts to block text that resembles credentials, but automated detection cannot identify every sensitive value.

3. How we use information

• Provide inline vocabulary annotations, translation, pronunciation, and contextual meanings.
• Save and synchronize your vocabulary and review progress across extension contexts.
• Authenticate your account, enforce trial or plan access, and protect the service from abuse.
• Create checkout and billing-management sessions and synchronize paid subscription access.
• Schedule browser reminders and send daily review emails to eligible accounts.
• Maintain, troubleshoot, secure, and measure the reliability of Lingo Nugget.

We do not use or transfer user data for personalized advertising, credit decisions, data brokerage, or other purposes unrelated to Lingo Nugget’s user-facing features.

4. Service providers and data sharing

We share only the information needed to operate Lingo Nugget with these service providers:

• Google Cloud and Google AI services Google Translate, Gemini, and Text-to-Speech process translation or pronunciation text and, when needed, sentence context. See the Google Privacy Policy.
• Resend Processes your email address, one-time login email, and enabled reminder emails, which may contain saved words and translations. See the Resend Privacy Policy.
• Creem Acts as merchant of record and processes checkout, payment, tax, subscription, invoice, and billing-portal data when you choose a paid plan. Lingo Nugget sends your account reference and email address to associate the purchase with your account. See the Creem Privacy Policy.
• Dictionary API dictionaryapi.dev receives individual word lookups and standard network data used to obtain pronunciation information.
• Railway and Cloudflare Provide application hosting, storage, networking, security, and operational logging. See the Railway Privacy Policy and Cloudflare Privacy Policy.

We may also disclose information when required by law, or when reasonably necessary to investigate abuse, fraud, or a security incident. If ownership of Lingo Nugget changes, user data will be transferred only with any notice or consent required by applicable law and Chrome Web Store policy.

5. Chrome Web Store Limited Use

Lingo Nugget’s use and transfer of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

We limit user data to providing or improving Lingo Nugget’s single purpose and related security and reliability operations. We do not permit people to read saved page content except when you explicitly request support for specific data, when required for security or law, or when data has been aggregated and de-identified for internal operations.

6. Storage, security, and retention

Some information is stored on your device using Chrome extension storage. Account data and synced vocabulary are stored in our service database. User data is transmitted over HTTPS. One-time codes are stored as hashes, session tokens are protected with one-way hashes, and sensitive session-rotation data is encrypted. Our hosting provider protects production storage with encryption at rest and access controls.

Our application request log records operational metadata such as route, status, timing, and request length—not the translation text itself. Infrastructure providers may maintain their own security and access logs under their policies.

We retain account and synced vocabulary data while your account remains active and for as long as reasonably necessary to provide the service, meet legal obligations, resolve disputes, and protect Lingo Nugget. Authentication, email-delivery, usage, and security records may be retained for operational and abuse-prevention needs. Service providers may retain information according to their own policies.

7. Your choices and controls

• Exclude a page from vocabulary processing using the extension popup.
• Remove saved words or mark them as mastered from the extension.
• Turn browser reminders off in the extension popup.
• Use the unsubscribe link in a reminder email to stop future reminder emails.
• Open Creem's customer portal from the extension to manage your paid subscription and payment method.
• Sign out to remove the active Lingo Nugget session from extension storage.
• Uninstall the extension to remove its local data. Uninstalling does not automatically delete data already synced to your account.

To request access, correction, export, or deletion of account data, email [email protected] from the address associated with your account. We may need to verify your identity before acting on a request.

8. Changes to this policy

We may update this policy as Lingo Nugget changes. We will update the date above and provide any additional notice or consent required for material changes to how user data is handled.

9. Contact

Questions or privacy requests can be sent to [email protected].