Privacy Policy

The data controller responsible for the personal data described in this policy is Zaur Bahramov, who operates Parolina as an individual (sole operator), based in Turin (TO), Piedmont, Italy (PO 10048). You can reach us about privacy at privacy@parolina.app.

We are established in the EU (Italy), so an Article 27 EU representative is not required. We have not appointed a statutory Data Protection Officer, as we are not required to; privacy questions still reach us at the address above.

• Parolina is local-first: your vocabulary lives in your browser by default and is never uploaded unless you create an account and turn on cloud sync.
• We process the minimum needed — selected text for translation, your email if you make an account, and anonymous usage stats (on by default, switchable off, and never containing your words).
• We never sell your data or use it for advertising.
• You can export your data, delete your account, and object to processing at any time.

Under GDPR we must have a lawful basis for each purpose. Here is the full picture:

Parolina stores your vocabulary data locally in your browser using IndexedDB. Your saved words, phrases, and learning progress never leave your device unless you explicitly create an account and turn on cloud sync (an optional, opt-in feature described below).

Parolina requests only the permissions it needs to function:

• Access to selected text on webpages — to save words and phrases you choose
• Storage permission — to save your vocabulary locally in your browser
• Right-click menu — to add a “Save to Parolina” action for selected text
• Reminders (alarms and notifications) — to optionally remind you to review words that are due
• Translation requests (translate.googleapis.com) — to fetch translation drafts for text you select or type
• Identity — only to open Google’s own sign-in window when you choose “Continue with Google”

Lessons on parolina.app: the extension marks lesson pages on this site so their “Add to Parolina” button can appear, and when you import a lesson by its code or link it downloads that public lesson file from parolina.app. Nothing about you or your vocabulary is sent with it.

Parolina collects anonymous, privacy-first usage analytics to understand which features help and where to improve. This is on by default and you can switch it offat any time in Options → Privacy & support. It runs whether or not you have an account, so these events are sent even if you never sign in. Events go to our own backend (Supabase, EU region), not to a third-party analytics provider. An event carries the name of the feature used, simple counts, and three facts about the copy of Parolina that sent it: its version, whether it is on the free or the paid plan, and which package it is — the Chrome one or the Edge one. It carries nothing else: never your saved words, translations, page contents, the addresses of pages you visit, your email, or any personal data. A random identifier generated on your device lets us count installs and sessions; it is not linked to your account or to you. There are no third-party analytics scripts, no advertising trackers, no cookies, and no fingerprinting. We keep this data in minimised form for the shortest reasonable period.

Parolina uses AI today, in one place: preparing translation drafts. When you save or look up a word, the text you selected is sent to Google Translate, a machine-translation system operated by Google, which returns a translation and — for many language pairs — a transliteration with stress marks. The word type (noun, verb, adjective) is worked out from what that response contains. We are the operator that deploys this feature; the underlying system is Google's.

The result is a draft, not an answer.It appears pre-filled in the form, you can change every field, and nothing is saved until you confirm it. Machine translation gets things wrong — especially with idioms, rare senses and short fragments without context — so please don't rely on it where accuracy matters.

What is not AI: spaced repetition, your review schedule, streaks, XP, levels and badges are ordinary rules and arithmetic — a fixed ladder of intervals and simple counters. Nothing profiles you, infers anything about you as a person, or makes a decision with legal or similarly significant effects. Parolina does not use cameras, microphones, biometrics or emotion detection, and does not assess you for any school, employer or third party.

What's coming: generative AI features — example sentences, plain-language explanations and collocations — are on our roadmap and not released. When they ship, generated text will be labelled as AI-generated, the provider behind it will be named here, and this policy will be updated before the feature goes live.

Under the EU AI Act (Regulation (EU) 2024/1689) Parolina is a minimal-risk AI system. It uses no prohibited practice, is not a high-risk system, and this section is how we meet the transparency duty in Article 50. If you have questions about how AI is used here, write to privacy@parolina.app.

When you use Parolina's translation features, the specific word or phrase you select or type, and its language pair, are sent to Google Translate (translate.googleapis.com) to generate a translation draft. Nothing else from the page goes with it: not the sentence around it, not the page address, and never the full contents of the pages you visit. No API keys or account information are attached to these requests. If you don't use translation, no text is sent anywhere.

Creating an account is optional and only needed for cloud sync and Pro. Sign-in is passwordless: you enter your email address and we send a one-time 6-digit code (or you can use “Continue with Google”). We store your email address to identify your account. Authentication emails are delivered through our email provider (Brevo) solely to send you that code — your email is never sold or used for marketing. Account services are provided by Supabase, hosted in the EU.

Cloud sync is an optional, opt-in feature and is free for everyone. When you sign in and turn it on, the vocabulary data you choose to back up (your words, dictionaries, learning progress, settings, and gamification stats) is sent to our managed backend (Supabase, EU region) so you can restore it on another device. A saved word travels with the sentence it was saved in, or the example you added to it; the address, title and surrounding text of the page it came from stay on your device and are not synced. Data is transmitted over HTTPS and stored in our encrypted database, and access is scoped so an account can only ever read its own data. Local-first storage always remains available, and you can export your data or sign out at any time.

Parolina Pro is a paid subscription. Payments are processed by Stripe. Where applicable, payments, taxes, invoices, and refunds may be handled by Stripe Managed Paymentsacting as merchant of record for the transaction. When you subscribe, Stripe collects and processes your payment details (such as card information and billing country) directly; we do not receive or store your full card number. We receive limited billing metadata — for example your subscription status, plan, and country — to grant the correct entitlements and to meet our accounting obligations. Stripe's handling of your data is governed by the Stripe Privacy Policy. Refunds and cancellation are described in our Terms of Service.

If you submit our feedback form or join the launch waitlist, we store the email address and message you provide in our database (Supabase, EU region) so we can reply to you or notify you at launch. These submissions are used only for that purpose — never for advertising — and we keep them only until they are no longer needed, or until you ask us to delete them by emailing privacy@parolina.app.

We share personal data only with the service providers needed to run Parolina:

We link to our YouTube channel, and the homepage shows one video. The YouTube player loads only when you click play. Until then, no data is sent to YouTube. The preview image is served from this site, not from YouTube, and the player itself is loaded from youtube-nocookie.com at the moment you press play.

Our account, sync, and email infrastructure is hosted in the EU. Some providers (Google, Stripe, Cloudflare) may process data outside the EU. Where that happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework.

The Parolina marketing site (parolina.app) does not use tracking or advertising cookies. The browser extension stores your vocabulary in your browser's local storage (IndexedDB), which is not a cookie.

The account portal (app.parolina.app) uses strictly necessary cookies / local storage to keep you signed in after you log in. These are essential for the sign-in feature to work and are not used for tracking or advertising.

We keep personal data only as long as needed for the purpose it was collected, and no longer than legally required. In practice:

• Account email & synced data: kept while your account is active; deleted or anonymised as soon as reasonably possible after you delete your account, unless we are legally required to keep specific records
• Translation requests: not stored by us after the translation draft is returned
• Anonymous analytics: kept in minimised form for the shortest reasonable period, then deleted or aggregated
• Feedback & waitlist emails: kept only until no longer needed for the purpose, or until you ask us to delete them
• Billing records: kept only for the minimum period required by Italian/EU tax and accounting law, and handled largely by Stripe

Wherever we process your personal data, you have the right to:

• Access: get a copy of the personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: have your data deleted (“right to be forgotten”) — including by deleting your account
• Restriction: ask us to limit how we use your data
• Objection: object to processing based on our legitimate interests, including analytics
• Portability: receive your data in a portable format and reuse it elsewhere — Parolina offers one-click CSV and JSON export
• Withdraw consent: withdraw consent at any time where we rely on it (e.g. turn analytics off, or unsubscribe)

Deleting your account: if you have an account, you can delete it and all associated data yourself at any time from the account portal (Settings → Delete account). This permanently removes your account and everything synced to it across your devices — we delete or anonymise your account data as soon as reasonably possible (see How long we keep your data), and any active subscription is cancelled. Your local, on-device data is separate and always under your control.

To exercise any of these, email privacy@parolina.app. You also have the right to lodge a complaint with a data protection supervisory authority — in particular in your country of residence, or with our lead authority, the Italian Garante per la protezione dei dati personali.

You can export your complete vocabulary collection at any time with one click. Parolina provides manual export and import functionality (CSV and JSON) so your data is always yours — no lock-in, ever.

Parolina is a language-learning tool and everyone is welcome to use its local, account-free features. Where the law sets an age for consenting to the processing of personal data, we follow the Italian threshold: if you are 14 or older you may create an account and consent to the data processing described here yourself. If you are under 14, a parent or legal guardian must provide that consent on your behalf before you create an account. If you believe a child has given us personal data without the required consent, contact us and we will delete it.

Parolina's collection and use of user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. The data that leaves your device is limited to the text you choose to translate, your email address if you create an account, your vocabulary and learning data if you turn on cloud sync, payment data you provide to Stripe, and anonymous usage analytics. Each is used solely to provide the corresponding feature. We do not sell or transfer your data to third parties for unrelated purposes.

We may update this privacy policy as Parolina evolves. We will notify users of material changes through the extension or website and update the date below.

If you have questions about this policy or Parolina's data practices, please contact us at privacy@parolina.app.