Privacy Policy

The data controller responsible for the personal data described in this policy is Zaur Bahramov, who operates Parolina as an individual (sole operator), based in Turin (TO), Piedmont, Italy (PO 10048). You can reach us about privacy at privacy@parolina.app.

We are established in the EU (Italy), so an Article 27 EU representative is not required. We have not appointed a statutory Data Protection Officer, as we are not required to; privacy questions still reach us at the address above.

• Parolina is local-first: your vocabulary lives in your browser by default and is never uploaded unless you create an account and turn on cloud sync.
• We process the minimum needed — selected text for translation, your email if you make an account, and anonymous usage stats (on by default, switchable off, and never containing your words).
• We never sell your data or use it for advertising.
• You can export your data, delete your account, and object to processing at any time.

Under GDPR we must have a lawful basis for each purpose. Here is the full picture:

Parolina stores your vocabulary data locally in your browser using IndexedDB. Your saved words, phrases, and learning progress never leave your device unless you explicitly create an account and turn on cloud sync (an optional, opt-in feature described below).

Parolina requests only the permissions it needs to function:

• Access to selected text on webpages — to save words and phrases you choose
• Storage permission — to save your vocabulary locally in your browser
• Right-click menu — to add a “Save to Parolina” action for selected text
• Reminders (alarms and notifications) — to optionally remind you to review words that are due
• Translation requests (translate.googleapis.com) — to fetch translation drafts for text you select or type

Parolina collects anonymous, privacy-first usage analytics to understand which features help and where to improve. This is on by default and you can switch it offat any time in Options → Privacy & support. It runs whether or not you have an account, so these events are sent even if you never sign in. Events go to our own backend (Supabase, EU region), not to a third-party analytics provider. They contain only feature names and counts — never your saved words, translations, page contents, the addresses of pages you visit, your email, or any personal data. A random identifier generated on your device lets us count installs and sessions; it is not linked to your account or to you. There are no third-party analytics scripts, no advertising trackers, no cookies, and no fingerprinting. We keep this data in minimised form for the shortest reasonable period.

When you use Parolina's translation features, the specific word or phrase you select or type — along with the minimal surrounding context needed for an accurate result — is sent to Google Translate (translate.googleapis.com) to generate a translation draft. Parolina never sends the full contents of the pages you visit, and no API keys or account information are attached to these requests. If you don't use translation, no text is sent anywhere.

Creating an account is optional and only needed for cloud sync and Pro. Sign-in is passwordless: you enter your email address and we send a one-time 6-digit code (or you can use “Continue with Google”). We store your email address to identify your account. Authentication emails are delivered through our email provider (Brevo) solely to send you that code — your email is never sold or used for marketing. Account services are provided by Supabase, hosted in the EU.

Cloud sync is an optional, opt-in feature and is free for everyone. When you sign in and turn it on, the vocabulary data you choose to back up (your words, dictionaries, learning progress, settings, and gamification stats) is sent to our managed backend (Supabase, EU region) so you can restore it on another device. Privacy-sensitive details such as the source URLs of saved words are not synced. Data is transmitted over HTTPS and stored in our encrypted database, and access is scoped so an account can only ever read its own data. Local-first storage always remains available, and you can export your data or sign out at any time.

Parolina Pro is a paid subscription. Payments are processed by Stripe. Where applicable, payments, taxes, invoices, and refunds may be handled by Stripe Managed Paymentsacting as merchant of record for the transaction. When you subscribe, Stripe collects and processes your payment details (such as card information and billing country) directly; we do not receive or store your full card number. We receive limited billing metadata — for example your subscription status, plan, and country — to grant the correct entitlements and to meet our accounting obligations. Stripe's handling of your data is governed by the Stripe Privacy Policy. Refunds and cancellation are described in our Terms of Service.

If you submit our feedback form or join the launch waitlist, we store the email address and message you provide in our database (Supabase, EU region) so we can reply to you or notify you at launch. These submissions are used only for that purpose — never for advertising — and we keep them only until they are no longer needed, or until you ask us to delete them by emailing privacy@parolina.app.

We share personal data only with the service providers needed to run Parolina:

Our account, sync, and email infrastructure is hosted in the EU. Some providers (Google, Stripe, Cloudflare) may process data outside the EU. Where that happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework.

The Parolina marketing site (parolina.app) does not use tracking or advertising cookies. The browser extension stores your vocabulary in your browser's local storage (IndexedDB), which is not a cookie.

The account portal (app.parolina.app) uses strictly necessary cookies / local storage to keep you signed in after you log in. These are essential for the sign-in feature to work and are not used for tracking or advertising.

We keep personal data only as long as needed for the purpose it was collected, and no longer than legally required. In practice:

• Account email & synced data: kept while your account is active; deleted or anonymised as soon as reasonably possible after you delete your account, unless we are legally required to keep specific records
• Translation requests: not stored by us after the translation draft is returned
• Anonymous analytics: kept in minimised form for the shortest reasonable period, then deleted or aggregated
• Feedback & waitlist emails: kept only until no longer needed for the purpose, or until you ask us to delete them
• Billing records: kept only for the minimum period required by Italian/EU tax and accounting law, and handled largely by Stripe

Wherever we process your personal data, you have the right to:

• Access: get a copy of the personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: have your data deleted (“right to be forgotten”) — including by deleting your account
• Restriction: ask us to limit how we use your data
• Objection: object to processing based on our legitimate interests, including analytics
• Portability: receive your data in a portable format and reuse it elsewhere — Parolina offers one-click CSV and JSON export
• Withdraw consent: withdraw consent at any time where we rely on it (e.g. turn analytics off, or unsubscribe)

Deleting your account: if you have an account, you can delete it and all associated data yourself at any time from the account portal (Settings → Delete account). This permanently removes your account and everything synced to it across your devices — we delete or anonymise your account data as soon as reasonably possible (see How long we keep your data), and any active subscription is cancelled. Your local, on-device data is separate and always under your control.

To exercise any of these, email privacy@parolina.app. You also have the right to lodge a complaint with a data protection supervisory authority — in particular in your country of residence, or with our lead authority, the Italian Garante per la protezione dei dati personali.

You can export your complete vocabulary collection at any time with one click. Parolina provides manual export and import functionality (CSV and JSON) so your data is always yours — no lock-in, ever.

Parolina is a language-learning tool and everyone is welcome to use its local, account-free features. Where the law sets an age for consenting to the processing of personal data, we follow the Italian threshold: if you are 14 or older you may create an account and consent to the data processing described here yourself. If you are under 14, a parent or legal guardian must provide that consent on your behalf before you create an account. If you believe a child has given us personal data without the required consent, contact us and we will delete it.

Parolina's collection and use of user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. The data that leaves your device is limited to the text you choose to translate, your email address if you create an account, your vocabulary and learning data if you turn on cloud sync, payment data you provide to Stripe, and anonymous usage analytics. Each is used solely to provide the corresponding feature. We do not sell or transfer your data to third parties for unrelated purposes.

We may update this privacy policy as Parolina evolves. We will notify users of material changes through the extension or website and update the date below.

If you have questions about this policy or Parolina's data practices, please contact us at privacy@parolina.app.