Privacy Policy

Last updated: June 3, 2026

What This Extension Does

What's That Word is a Chrome extension that translates Spanish sentences to English when you hover over text on any web page. It sends the hovered sentence to a backend server which forwards it to the 3rd party LLM AI for translation.

Data Collected

• Account credentials — email and bcrypt-hashed password, used solely for authentication. Passwords are never stored in plain text.
• Authentication tokens — short-lived JWT tokens and opaque refresh tokens stored in chrome.storage.local to maintain your session. They never leave your browser except when sent to our server for token refresh or translation requests.
• Spanish text — the sentence you hover over is transmitted to our server and forwarded to the 3rd party LLM AI for translation. We do not permanently store the sentences you translate.
• Usage metrics — timestamp and success/failure of each translation request, used only for rate limiting and free-tier quota enforcement. These are aggregated per user account.

Data Not Collected

• Browsing history or navigation data
• Bookmarks, tabs, or downloads
• Personal identifiers beyond your email address
• Cookies or tracking identifiers (other than the token-based session)
• Content of pages you visit (only the specific sentence you hover over is sent)

Third-Party Services

Translation requests are processed by the 3rd party LLM AI API. The AI provider receives only the sentence to translate and returns the English result. No account information is shared with the AI provider. Their privacy policy applies to data they process.

Data Storage & Security

• All communication between the extension and our server uses HTTPS.
• Authentication tokens are stored locally in chrome.storage.local, which is sandboxed per extension and not accessible to other extensions or websites.
• Passwords are hashed with bcrypt before storage.
• Refresh tokens are single-use and rotated on every request.

Data Retention

Usage logs are retained for the current billing month for quota enforcement and are automatically purged when they fall outside the rolling window. Account information (email, password hash) is retained until you request deletion.

Your Rights

You may request deletion of your account and associated data at any time by contacting fadi@sefactory.io. Account deletion removes your user profile, stored tokens, and usage history.

Changes to This Policy

If we make material changes to this policy, we will update the "Last updated" date at the top and may notify you via the extension popup or the email address associated with your account.

Contact

For questions about this privacy policy or your data, contact:
fadi@sefactory.io

What's That Word — Spanish-to-English translation extension