隐私政策

1. Information We Collect

• Account Information: When you sign up, we collect your email address and name via Supabase for authentication.
• Client Compatibility: When you sign in from a supported app, we record only the client type, coarse operating-system family, app version, and a hash of a random installation identifier. We use this to maintain compatibility and prioritize platform support. We do not collect a device name, hardware identifier, full user-agent string, page URL, subtitle content, or audio for this purpose.
• Anonymous Analytics: The browser extension collects non-personally identifiable usage events via PostHog by default (e.g., feature usage counts, Local or Online mode, listening duration, and whether subtitles loaded successfully). These events are tied only to a random, resettable installation identifier. Analytics events do not include subtitle text, audio, or the URLs of the pages you watch. You can disable anonymous analytics at any time from the extension menu; disabling it also deletes the local analytics identifier and queued analytics events. Our website uses cookieless analytics (see Section 3).
• Online-mode audio: If you explicitly authorize Online mode, audio is streamed for live transcription and translation as described in Section 3.
• Payment Information: Website transactions are handled by Lemon Squeezy; purchases made in a supported app are handled by that app store. We do not store or process your credit card details on our servers.

2. Browser Extension Permissions

Lingather requires specific permissions to provide real-time AI transcription and translation. We adhere to the principle of least privilege:

• tabCapture / offscreen: Used solely to capture audio from the active tab for real-time transcription. Local mode processes that audio on your device. Online mode streams it only after the authorization described in Section 3.
• storage: Stores your preferences (e.g., target language) and your transcription history (video titles, subtitle text, and translations) locally on your device. You can clear this at any time from the history panel.
• scripting / activeTab: Allows the display of the subtitle overlay on the specific video page you are watching.
• tabs: Lets the extension detect when you switch between videos or tabs so subtitles are routed to the tab you are watching. We do not read or store your browsing history.
• identity: Manages your pro subscription status securely via Google Sign-In.

3. Third-Party Services & Privacy

We use a limited number of trusted partners to ensure the Service's performance and security:

• Cloudflare Web Analytics: Used for Real User Monitoring (RUM) to ensure the "instant-load" performance of our site. It is privacy-focused and cookieless.
• Umami Analytics: A self-hosted, anonymous analytics tool used to track feature conversion without tracking individual users.
• PostHog (Product Analytics): Powers the browser extension's default-on, anonymous usage analytics. It is configured to avoid creating person profiles and to disable IP-based geolocation. Users can turn it off from the extension menu. No personal data is sold or used to train third-party models.
• AI Processing:

  Local mode keeps raw audio on your device and does not upload it.

  Online mode sends audio to Lingather's service and then to Alibaba Cloud's Singapore region only after your explicit authorization.

  Before Online mode connects, you choose captions only or captions with voice-cloned translated speech. Voice-cloned output derives voice characteristics from the live audio and generates translated speech in addition to the same bilingual captions.

  Metered Online cloud processing uses a metered point allowance shown in the product; it is not unlimited. New accounts start with 0 Online points, while an active Pro subscription receives 1,000 points per subscription month.

• Payment providers: Lemon Squeezy acts as Merchant of Record for website orders. A supported app store processes purchases made through that store.

4. Privacy & Cookie Usage

Lingather prioritizes your privacy. We do not use persistent tracking cookies, advertising IDs, or cross-site tracking technologies.

We use essential local storage or secure tokens strictly for authentication (via Supabase and Google OAuth) and to maintain your active session. These are necessary for the Service to function and are not used for marketing purposes.

5. Data Retention & Deletion

You may request deletion from the Lingather app or our dedicated account deletion page. We require recent Google verification to protect the account from unauthorized deletion. After a request is accepted, Lingather access is blocked immediately and we remove the account's authentication identity, server sessions, profile, account bindings, entitlements, quota records, checkout sessions, and remaining Online point balances. Supported recurring subscription renewals are submitted for cancellation. Account deletion is not a refund, so users should request any eligible refund before deleting.

We retain only limited records after deletion where necessary:

• Payment and refund records: Purchase, refund, tax, chargeback, and provider reconciliation records may be retained for the period required by applicable law, provider rules, or the establishment and defense of legal claims. Direct account identifiers are removed or minimized where possible, and these records are not used to recreate the deleted account.
• Historical promotion audit marker: The signup-point program is closed and no new grant marker is created. For grants issued before the policy change, we may retain a restricted, pseudonymous hash derived from the Google identity together with the grant fact for fraud review and accounting disputes. It does not contain the Google email or profile and cannot restore a deleted account or its points.
• Deletion request tombstone: A pseudonymous request reference is retained for 30 days so retries remain idempotent and support can verify completion, then it is purged.

Access to retained records is restricted to billing, security, compliance, and support purposes. We periodically review whether continued retention remains necessary. Data exported to your own device is controlled by you and must be deleted locally.

6. Your Rights (GDPR/CCPA)

Regardless of your location, we respect your right to access, correct, or delete your data. European (EEA) users have rights under GDPR, and California users under CCPA. For any data-related requests, please contact us at: lingather@rockhammerlabs.com.

7. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please reach out to us at:
lingather@rockhammerlabs.com