Skip to main content
Back

Privacy Policy for Belugaro

Effective Date: February 5, 2026

Last Updated: February 5, 2026

At Belugaro ("we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (https://belugaro.com), Chrome browser extension, and related services (collectively, the "Services").

We only collect and process personal information that is necessary to operate our Services or that you voluntarily provide. We are committed to data minimization and purpose limitation.

Please read this Privacy Policy carefully. By using our Services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information

When you create an account or use our Services, we may collect:

  • Account Information: Name, email address, and profile picture (obtained through Google OAuth authentication)
  • Payment Information: When you subscribe to our paid plans, payment details are collected and processed by Stripe, our payment processor. We store your Stripe customer ID but do not have access to your full credit card number.
  • Communication Data: Messages you send through our contact form or customer support chat

1.2 Learning and Usage Data

To provide and improve our language learning service, we collect:

  • Word Interactions: Words translated on web pages, words you hover over, and audio pronunciations you play
  • Study Session Data: Your responses during flashcard reviews (correct/incorrect), review timestamps, and spaced repetition intervals
  • Learning Progress: Words learned, vocabulary levels achieved, and learning streaks
  • User Preferences: Target language selection, blocked words, locked translations, and extension settings
  • Site Preferences: Websites where you've disabled the extension

1.3 Automatically Collected Information

When you use our Services, we automatically collect:

  • Device Information: Browser type, operating system, and device identifiers
  • Usage Data: Pages visited, features used, extension toggle events, and session duration
  • Log Data: IP address (for rate limiting and security), error logs, and crash reports
  • Browsing Context: The Chrome extension operates on web pages you visit to identify and translate vocabulary words. We are designed not to store full page URLs or page content, and we take measures to avoid collecting this information—only the vocabulary words that are translated are stored.

2. How We Use Your Information

We use the collected information for the following purposes:

  • Provide Our Services: Deliver personalized vocabulary translations, track your learning progress, and power spaced repetition reviews
  • Account Management: Create and manage your account, process subscriptions, and communicate with you about your account
  • Improve Our Services: Analyze usage patterns to improve our product, fix bugs, and develop new features
  • Customer Support: Respond to your inquiries and provide technical assistance
  • Security: Detect and prevent fraud, abuse, and security incidents
  • Legal Compliance: Comply with applicable laws, regulations, and legal processes

3. Cookies and Tracking Technologies

3.1 Cookies We Use

  • Essential Cookies: Required for authentication and session management
  • Preference Cookies: Store your theme preference (light/dark mode) and consent choices
  • Analytics Cookies: Help us understand how you use our Services (only with your consent)

3.2 Your Cookie Choices

When you first visit our website, you will be presented with a cookie consent banner. You can choose to accept or decline non-essential cookies. Analytics tracking only begins after you accept cookies. You can change your preferences at any time through your browser settings.

4. Third-Party Services

We use trusted third-party service providers to operate and improve our Services. These providers process data on our behalf under contractual privacy and security obligations. Our service providers fall into the following categories:

  • Authentication Providers: To securely verify your identity (e.g., Google OAuth)
  • Payment Processors: To handle subscription payments securely (e.g., Stripe)
  • Cloud Infrastructure: To host our application and database
  • Analytics Services: To understand how our Services are used (only with your consent)
  • Customer Support Tools: To provide assistance and respond to inquiries
  • Email Services: To send account notifications and communications
  • Content Delivery: To serve audio files and static content

Each third-party service provider has its own privacy policy governing their use of your data. We encourage you to review their policies. We regularly review our service providers to ensure they maintain appropriate privacy and security standards.

5. Chrome Extension Privacy

Our Chrome extension requires certain permissions to function:

  • Storage: To save your settings and learning progress locally
  • ActiveTab: To read and modify the current page for word translation
  • Notifications: To send practice reminders (if enabled)
  • Alarms: To schedule reminder notifications

What the extension does NOT do:

  • The extension is designed not to collect or store the full content of web pages you visit
  • We do not track your browsing history
  • We do not sell any data to third parties
  • We do not inject advertisements

6. Data Retention

  • Account Data: Retained while your account is active and for 30 days after deletion request
  • Learning Data: Retained while your account is active to maintain your progress
  • Analytics Data: Retained for up to 2 years in aggregated form
  • Error Logs: Retained for 90 days for debugging purposes
  • Payment Records: Retained as required by law for tax and accounting purposes

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure, encrypted database hosting with trusted cloud providers
  • Regular security reviews and updates
  • Limited access to personal data on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights and Choices

8.1 All Users

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate data
  • Deletion: Request deletion of your account and associated data
  • Portability: Request your data in a portable format
  • Opt-out: Disable analytics tracking through cookie settings

8.2 European Users (GDPR)

If you are in the European Economic Area, you additionally have the right to:

  • Object to processing of your personal data
  • Restrict processing of your personal data
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority

Legal Basis for Processing: We process your data based on: (a) your consent for analytics, (b) contract performance for providing our Services, (c) legitimate interests for improving our Services and security.

8.3 California Users (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information we collect about you
  • Request deletion of your personal information
  • Opt-out of the sale of your personal information (we do not sell personal information)
  • Non-discrimination for exercising your privacy rights

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and Canada, where our servers and third-party service providers are located. These countries may have different data protection laws than your country.

When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities.

10. Children's Privacy

Our Services are not intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at zac@belugaro.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on this page with a new "Last Updated" date
  • Sending an email notification to registered users for significant changes

Your continued use of our Services after any changes indicates your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

  • Email: zac@belugaro.com
  • Website: https://belugaro.com

We aim to respond to all privacy-related inquiries within 30 days.

Thank you for trusting Belugaro with your language learning journey.