Web Companion – Privacy Policy
1. In one sentence
This extension collects nothing and uploads nothing to our servers. It only sends the text you select on a web page over loopback (127.0.0.1) to the GetiPlusOne desktop app running on your own computer, for dictionary lookup, card creation and offline translation. All data stays on your device.
2. Data we process and why
| Data | When | Where it goes | Purpose |
|---|---|---|---|
| Selected text (word / sentence) | When you select text or click a bubble action | Local 127.0.0.1 desktop app | Lookup, card creation, offline translation |
| Page URL / title | When you click "Add reading card" | Local desktop app (stored with the card) | Record the card's source page |
| Pairing token | After pairing | Browser local storage (chrome.storage.local) | Authenticate to the desktop app; revocable |
| Target language | When you pick it in options | Browser local storage | Translation output language |
Not processed: browsing history, cookies, credentials, form data, keystrokes, or page content unrelated to the feature.
3. Does data leave your device?
No. The extension only talks to http://127.0.0.1:* (loopback). There is no other network request in the code. Translation is performed locally by the desktop app (llama.cpp + Qwen), fully offline.
4. Permissions and their purpose
storage— store the pairing token and target-language setting (local only).clipboardWrite— write to the clipboard only when you click the bubble's "Copy original" action.host_permissions: http://127.0.0.1/*— communicate with the desktop app (loopback only).content_scripts: <all_urls>— enable "select text → bubble" on any page. We do not inject third-party scripts and do not modify page content; the bubble renders inside our own Shadow DOM.
5. Retention & deletion
- Unpair (extension options → Unbind): the local token is deleted and revoked on the desktop side immediately.
- Uninstall: the browser clears
chrome.storage.localand all extension data. - Card data lives in the desktop app's local database; manage it in the app's Card Center.
6. Sharing / selling / ads / analytics
We do not share, sell, advertise, or run analytics (no Google Analytics / Sentry, etc.). No remote code: all scripts ship with the package (MV3 default CSP).
7. Children's privacy
Not intended for children under 13; we collect no personal information.
8. Changes
Updates to this policy will bump the "Last updated" date above.
9. Contact
support@getiplusone.app · Desktop app privacy policy · Requires the GetiPlusOne desktop app installed and running locally.