1. Introduction
This Privacy Policy describes how the LexiScene browser extension and website (collectively, "LexiScene", "we", "our") collect, use, and protect your information when you use our services. By using LexiScene, you acknowledge the practices described in this policy.
LexiScene is operated by a sole proprietor based in Japan. Contact information is provided in the "Contact" section below.
2. Information We Collect
2.1 Information you provide
- Account information (Premium / sync users only): email address used for sign-in, authentication tokens. We do not collect or store passwords on our servers; sign-in uses third-party identity providers.
- Payment information (Premium subscribers): processed entirely by our payment processor (e.g. Stripe). We never see or store your full card number; we only receive a tokenized identifier and the subscription status.
- Word list data (sync users only): the words you save, displayed word forms, dictionary entries, saved subtitle context, and timestamps. This data is stored on Firebase / Google Cloud infrastructure with encryption in transit and at rest, and is tied to your account.
- Contact form submissions: any information you voluntarily include when contacting us.
2.2 Information collected automatically
- Local-only data: your subtitle preferences, UI settings, daily challenge progress, and (if sync is disabled) your word list. This data is stored locally in your browser via
chrome.storage and is not transmitted to our servers.
- Dictionary lookup requests: when you click a word, the word and minimal surrounding context (the subtitle line) are sent to our backend (Firebase Cloud Functions) to generate the definition. We do not intentionally attach account identifiers to these requests.
- Basic technical logs: standard server logs (IP address, timestamps, request paths) retained for up to 30 days for security and abuse prevention.
2.3 What we do not collect
- We do not access the video, audio, or DRM-protected media content on Disney+, Netflix, or YouTube.
- We do not track your browsing history outside of LexiScene-supported pages.
- We do not use third-party analytics, advertising trackers, or behavioral profiling.
3. How We Use Your Information
- To provide and improve the core features of LexiScene (dictionary, word list, daily challenge, etc.).
- To process Premium subscriptions and provide associated features.
- To synchronize your word list across browsers when you opt in to sync.
- To respond to your inquiries submitted via the contact form.
- To detect, prevent, and investigate fraud, abuse, or security incidents.
- To comply with applicable legal obligations.
We do not sell your personal data, and we do not share it with third parties for advertising purposes.
4. Data Storage and Security
Account data and synced word lists are stored on Google Firebase / Google Cloud infrastructure with industry-standard encryption in transit (TLS) and at rest. Payment processing is handled by Stripe, a PCI-DSS compliant service provider.
While we take reasonable measures to protect your information, no method of electronic storage is 100% secure. We cannot guarantee absolute security.
5. Third-Party Service Providers
We use the following sub-processors strictly to provide the service:
| Provider | Purpose |
|---|
| Google Firebase | Authentication, database (Firestore), serverless functions, hosting |
|---|
| Stripe | Subscription billing and payment processing |
|---|
| OpenAI / Anthropic / Google AI | Backend dictionary generation (request content only; no account identifiers attached) |
|---|
6. Your Rights
Depending on your jurisdiction (including the EU/EEA, UK, California), you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and associated data.
- Export your word list (Premium users can export at any time).
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
To exercise any of these rights, please contact us via the contact form. We will respond within 30 days.
7. Data Retention
- Word list (synced): retained while your account is active. Deleted within 30 days after account deletion.
- Account information: retained for as long as your account is active.
- Technical logs: up to 30 days.
- Billing records: retained as required by applicable tax and accounting law (typically 7 years).
8. Children’s Privacy
LexiScene is not directed at children under 13 (or under 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us so we can delete it.
9. International Data Transfers
LexiScene is operated from Japan. If you use the service from another country, your information may be transferred to and processed in countries outside your country of residence, including the United States (Stripe, Firebase). We rely on appropriate safeguards provided by our service providers, including standard contractual clauses where applicable.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Material changes will be communicated through the extension or website.
11. Contact
For privacy-related inquiries, please use our contact form. Operator name, address, and phone number are available upon legitimate request as permitted under applicable law.