Privacy Policy

Last updated: 25 July 2026

This policy explains what data the Vocab web app (injaoonja.nl) and the Vocab Flashcards Chrome extension process, why, and the choices you have. Vocab is a tool for saving and reviewing English words you meet while reading. We built it to touch as little of your data as possible.

The short version

• The extension only ever acts on the specific word (or short phrase) you deliberately select and look up. It does not read the pages you browse, your history, your keystrokes, or your location.
• By default your saved words and review progress stay on your own device, in the browser's local storage.
• Signing in to sync across devices is optional. Only then do we store your words in an account tied to your email.
• We do not sell your data, show ads, or use your data for anything unrelated to defining and reviewing your words.

What we process, and why

1. Words you look up

When you select a word and trigger a lookup (right-click → “Define” or the keyboard shortcut), that single word is sent to our server to fetch a clear, learner-friendly definition. To generate that definition our server may pass the word to Google's Gemini API. If our server is unavailable, the extension instead sends the word to the free public dictionary API at dictionaryapi.dev. Only the word itself is sent — never the surrounding page, its URL, or any other content. If you are not signed in, a lookup is not linked to your identity.

2. Words you save & your review progress

Each word you keep is stored — with its definition, example sentence, and how many times you've reviewed it — in your browser's local storage (chrome.storage.local). This never leaves your device unless you choose to sign in and sync.

3. Account information (only if you sign in to sync)

Syncing across devices is optional. If you sign in, we process your name, email address, and an authentication token so we can store your word list in your account and keep it in step across your devices. The token is kept in the extension's local storage on your device.

If you sign in to sync, we record basic product-usage events (e.g. account created, word saved, review completed) tied to your email, so we can understand how the app is used and improve it. This is product analytics, not advertising or profiling — see the PostHog entry below.

Feedback you choose to send. If you answer the “How's Vocab going?” prompt, the star rating and anything you type are stored on our server alongside your account, so we can read it and act on it. It is entirely optional — skipping it changes nothing — and it is never shared with anyone or used to decide what we show you.

How your data is used

Solely to provide the service you asked for: returning a definition, saving your flashcards, scheduling reviews, and — if you opted in — syncing them across your devices. We do not sell or rent your data, we do not use it for advertising or profiling, and we do not use it to determine creditworthiness or for any lending purpose. This is consistent with the Chrome Web Store Limited Use requirements.

Who else touches the data

• Google (Gemini API) — receives the individual word to generate a learner-friendly definition. See Google's Privacy Policy.
• dictionaryapi.dev — a free public dictionary used only as a fallback; receives the individual word.
• Our hosting provider — runs the server that stores synced accounts. Data is not shared with anyone else.
• PostHog — receives your email and basic product-usage events (account created, word saved, review completed) so we can understand how the app is used. Not used for advertising. See PostHog's Privacy Policy.

Keeping and deleting your data

• Local data: delete any word from the extension's History tab, or remove everything by uninstalling the extension.
• Synced data: deleting a word removes it from your account and from your other devices. You can disconnect syncing at any time from the extension's Account tab.
• Your whole account: to delete your account and all associated data, contact us at the address below and we will remove it.

Security

All traffic between the extension, our server, and third-party APIs uses HTTPS. Your authentication token lives only on your device and can be revoked by disconnecting.

Children

Vocab is not directed to children under 13 and we do not knowingly collect their personal data.

Changes

If this policy changes we will update the date at the top of this page.

Contact

Questions, or want your account deleted? Email support@injaoonja.nl.