Privacy Policy

1. Who is responsible

The data controller is:

Use that address to exercise any of the rights in § 8, or to ask anything about this document.

2. What we receive

When you read a page

• An installation identifier. A random string generated when you install the extension. It is not an account: it contains no name, no address, nothing taken from anywhere else, and it tells us nothing about you outside Ubueno.
• The text of the passages to be translated. We only read a page's reading text — paragraphs, headings, quotations, lists. Input fields, forms and navigation are excluded at the root: their content is not even read as context.
• The page's word count, the two languages you chose, and your level. That is what lets us decide how many words to replace.
• The page address — it passes through, it is not stored. It serves two purposes, both immediate and limited to that one request: keeping the extension away from sites where it must never work (banking, payment, sign-in pages), and respecting the pauses you have set. Our technical logs keep only the domain — lemonde.fr — never the article.

If you create an account, which is optional

• Your email address, and nothing else. There is no password here: we send you a single-use code.
• An account does two things only: it lets you find your progress again on another device or after a reinstall, and it carries your subscription if you take one.

Usage measurement

To understand what works and where the product gets in the way, the extension groups common actions into one summary per active day: pages processed, substitutions seen and clicked, time spent in the card and panel, questions answered, quota and screens viewed. A few rare journey steps — installation, paywall, account creation and payment — are sent separately. We receive the website domain, never the full address, text you read, words, your answers or your email address. The installation identifier is replaced with a pseudonym before anything is sent to PostHog. You can turn this off at any time under “Your data”; pending measurements are then deleted.

What your learning produces, and what we keep

The words you've come across, the ones in your notebook, your answers, your progress on the maps, your level. That is the service: without it, there would be nothing to find again from one day to the next. You can take all of it, as a single file, at any time (§ 8).

If you report a bad translation

We keep the original word, the translation shown, the short source-language excerpt displayed in the form before you send it, your suggested correction and any optional detail you write. The page address, your installation identifier and your account are not stored with the report. It is used only for manual review and never removes a translation automatically.

3. What we do not do

• No cookies, advertising trackers or invisible pixels. Product measurement described in § 2 goes only through our own server.
• We do not read what you type into web pages. Input fields, forms and text areas are excluded from reading, not filtered out afterwards.
• We never sell, rent or trade any data. To anyone.
• We build no advertising profile, and we cross-reference your data with no outside source.
• No notifications, no reminders, no re-engagement emails. That is a product decision as much as a privacy one.
• The extension uses local storage, a daily alarm and access to pages you read. The alarm catches up daily summaries after the browser was closed; page access lets the product exist and serves nothing else.

Chrome Web Store Limited Use compliance

Ubueno's use and transfer of data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements:

• we use it only to provide or improve the extension's visible single purpose: helping you learn a language on the pages you read;
• we transfer it only when necessary to provide that service, keep it secure, or comply with the law;
• we do not use or transfer it for personalized advertising, retargeting, or advertising profiles;
• no one is allowed to read it, except with your consent to handle a specific request, for security, to comply with the law, or in an aggregated and anonymized form for our internal operations.

4. Who the data goes to

We rely on providers to host the service, process its content, and run an account. These three roles do not provide access to the same data.

The infrastructure that runs the service

Content services — without identity

Account services — without the text of your pages

Product measurement — without text or full addresses

None of these account services receives the text of the pages you read.

Transfers outside the European Union

Three content services and one account service are established in the United States. Those transfers rely on the European Commission's standard contractual clauses and, where applicable, on the Data Privacy Framework. What goes to content services is text with no identifier: an isolated sentence, with nothing tying it to you.

5. Legal basis

• Performance of the contract (GDPR art. 6(1)(b)) — replacing words, keeping your progress, running your account and subscription. This is the service you asked for by installing the extension.
• Our legitimate interest (art. 6(1)(f)) — security, abuse prevention (requests are capped per installation), technical health and product improvement from minimized domain-level measurements, and reviewing translations you choose to report.
• A legal obligation (art. 6(1)(c)) — keeping the accounting records tied to a payment (§ 9).

This measurement relies on our legitimate interest, and you can object with one click under “Your data”. There are no non-essential cookies and no advertising.

6. Security

• Everything travels over HTTPS/TLS, between the extension and us as well as between us and our providers.
• There is no password to steal: signing in uses a single-use code, valid for fifteen minutes.
• Backups are encrypted before they leave our servers.
• Access to production data is limited to the publisher.

7. How long we keep things

8. Your rights, and how to use them

You have the rights of access, rectification, erasure, portability, restriction and objection set out in the GDPR. Two of them need neither a letter nor a wait:

Deletion takes everything: your progress, your notebook, your archives, your quota and your account link. If several devices share one account, everything is deleted for all of them — your progress lives under your account, not under a device, and that is exactly what lets it follow you.

For the other rights, or if you would rather write, there is one address: contact@ubueno.app. We reply within one month.

If our answer doesn't satisfy you, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris — cnil.fr — or with the supervisory authority of the country where you live.

9. Payment

Subscriptions are billed by Stripe. Your card details are entered on their side: they never pass through our servers and we never see them. We keep only the state of your subscription — active or not, and until when.

The sale terms, including the fourteen-day refund, are on the Terms of Sale page.

10. Children

Ubueno is not intended for children under 15 and we do not knowingly collect their data. If you are the parent of a child under 15 using Ubueno, write to contact@ubueno.app and we will delete the account.

11. If this policy changes

The last-updated date is at the top of this page. If a change affects what we collect or who the data goes to, we tell you in the extension panel before it takes effect — not just by changing this page. We won't email you about it: Ubueno only sends email when you ask it to.