Privacy Policy for Gloss

Last Updated: February 15, 2026

1. Introduction

Gloss ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how our Chrome Extension collects, uses, and discloses your information.

2. Information We Collect

We collect the following information only when you actively interact with the extension (e.g., by selecting text on a webpage):

• User Selected Text: The specific text you highlight for translation.
• Contextual Information: Surrounding text, page title, and URL to improve translation accuracy by understanding the context.
• Technical Data: Temporary logs required for error debugging (which do not contain personally identifiable information).

We do not collect browsing history, cookies, or any data from pages where you do not actively trigger the extension.

If you choose to sign in with Google, we also collect:

• Google Account Information: A Google user identifier (the sub field returned by Google's userinfo API). We may also collect your email address, display name, and profile picture to show account status in the extension UI.
• Authentication Tokens (Access Token): The extension obtains an OAuth access token via Chrome's chrome.identity API and sends it in the Authorization header to our backend for verification. We do not store refresh tokens (they are managed by Chrome).

3. How We Use Your Information

The collected information is used solely for the following purpose:

• To provide context-aware translations via our backend system.
• If you sign in with Google, to verify your identity, create or update your user record, and record basic usage counters for service operation and improvement.

4. Third-Party Services

We use trusted third-party services to process translations. Your data is transmitted securely to:

• AI/LLM Services (e.g., OpenAI): We send the selected text and contextual information to AI language model APIs to generate translations. We do not allow these services to use your data for model training.
• Google: If you sign in with Google, our backend calls Google's userinfo API to verify the access token and obtain a stable user identifier (sub).
• AWS (Amazon Web Services): Our backend infrastructure is hosted on AWS Lambda and stores limited metadata in AWS DynamoDB.

5. Data Retention

We do not store your selected text or translations permanently. Data is processed in real-time and is discarded after the translation is returned to your browser.

If you sign in with Google, we may store the following limited metadata:

• User record: sub (Google user identifier) and optionally email/name/profile picture, plan/perks, and last-used timestamp.
• Translation logs (metadata only): target language, text length, success/failure, and latency. We do not store the content of selected text in these logs.
• Usage counters: day/week/month counts associated with your user identifier for service operation and improvement.

Translation log records are retained for 14 days and then automatically deleted. Other account metadata and usage counters are retained as necessary to operate and improve the service or until deletion is requested.

6. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at: gloss.extension@gmail.com

---

日本語版: プライバシーポリシー（日本語）