隐私政策 Privacy Policy

1. 适用范围

本政策适用于 LangBox Chrome 扩展、LangBox 学习页面、官方网站及与其直接相关的服务（合称“LangBox”）。安装或使用 LangBox，即表示你已阅读本政策。若你不同意其中内容，请停止使用相关功能。

2. 我们处理哪些数据

账号信息

你可以以访客身份使用部分功能。选择 Google 登录时，我们会通过 Google Firebase Authentication 处理账号标识、电子邮箱、显示名称和头像等由 Google 提供的基本资料，并使用身份令牌确认你的登录状态。我们不会获得你的 Google 密码。

用户主动提交或要求处理的内容

当你主动开启网页翻译、字幕翻译、划词翻译、查词或学习内容生成功能时，LangBox 可能处理当前页面中与请求有关的可见文字、所选文字、字幕、页面标题和网址。我们不会仅因为你打开了一个网页，就把整段浏览内容发送到服务器或模型服务。

LangBox 不以收集密码、支付信息、医疗记录或其他高度敏感信息为目的。请不要在包含敏感个人信息的页面上启用翻译或提交此类内容。

学习与使用数据

为提供单词练习、近义词练习、句子练习和个性化复习，我们可能保存学习词汇、例句、翻译结果、来源页面、练习答案、正确或错误记录、复习进度、个人黑名单以及学习语言和目标等信息。

跟读录音

使用 YouTube 跟读时，扩展会在你按下录音键后通过麦克风录下一句话（最长 30 秒）。录音会发送到 LangBox 服务，并由我们配置的模型提供商转写成文字，用于逐词评分。LangBox 不保存录音；回放只在你的浏览器中进行。跟读需要登录，转写会使用模型额度。麦克风权限由浏览器针对 youtube.com 管理，你可以随时撤回。

官网访问统计

官网的公开介绍和指南页面使用 Firebase Analytics（Google Analytics 4）统计访问与前往 Chrome 商店的点击，包括页面路径、页面语言、按钮位置和来源网站域名。统计服务可能使用 Cookie、浏览器标识及设备信息来衡量访问。我们不向该统计发送邮箱、Firebase 账号 ID、翻译内容、网址查询参数或片段，也不在登录、回调和联系表单页面启用它。我们关闭广告个性化和 Google Signals，并尊重浏览器的“请勿跟踪”（DNT）和全球隐私控制（GPC）信号。商店点击不等于安装。

网站使用 PostHog（美国区）分析产品使用情况。未登录时使用保存在 Cookie 和本地存储中的随机标识；登录后通过专用的哈希账号标识关联登录前后的使用，以及不同设备上的使用。PDF 和电子书事件包括上传、整份翻译完成、译文预览、下载点击和文件交付，并附带哈希任务标识，以分析再次使用。我们不向 PostHog 发送邮箱、原始账号或文件 ID、文件名、文档正文和译文，不自动采集点击事件，网址只保留域名和路径。浏览器统计遵守 DNT、GPC 和统计关闭设置；上传时允许统计的任务会保存该设置，由服务器在后台报告完成事件，即使页面已关闭。下载事件不证明文件已保存到设备或被阅读。

对于首次访问的浏览器，我们使用 PostHog 录制首次会话在官网公开页面上的点击、滚动和页面变化，以发现使用障碍。已有访问记录的浏览器、内部账号、测试流量，以及登录、账号和文档阅读工作区不录制。录制会遮罩页面文字、输入值和可能包含个人内容的元素属性，并屏蔽图片、音视频、文档画布及嵌入页面；不采集控制台日志或网络请求正文。首次会话标识通过有效期一年的 Cookie 保存。清除浏览器数据或更换设备后，可能被再次识别为新访客。录制遵守上述 DNT、GPC 和统计关闭设置。

扩展使用统计

为了解哪些功能有用，LangBox 扩展会向 PostHog 发送匿名的使用事件，例如安装或更新、开启 YouTube 双语字幕、打开双语听写、提交听写答案的得分，以及翻译网页或查词等操作。每个事件只包含事件名称、固定的选项值、扩展版本、浏览器界面语言和一个保存在扩展本地的随机标识。我们不发送网址、视频 ID、网页或字幕文字、翻译内容、单词、邮箱或账号 ID。你可以在扩展设置中关闭“匿名使用统计”。

错误诊断

扩展或网站向 PostHog 报告错误时，会在可获取的情况下附上页面网址，以及错误时间、版本和诊断信息。网址可保留路径、视频 ID、页面 ID 和路由片段，用于定位故障。我们删除网址中的账号密码、登录令牌、授权码，以及固定白名单之外的查询参数。扩展的错误报告还附带保存在扩展本地的随机标识，用于统计同一故障影响的安装数量。错误上报不会持续收集浏览历史。

设置和技术数据

LangBox 会在浏览器本地保存目标语言、启用翻译的网站、翻译布局、模型选择、学习偏好、界面位置及必要缓存。我们的服务器和基础设施还可能处理完成请求所需的 IP 地址、时间、设备或浏览器类型以及有限的错误日志，用于安全防护、故障诊断和服务稳定性。

3. 我们如何使用数据

我们仅将相关数据用于：

• 翻译网页、所选文字和视频字幕；
• 提供查词、发音、单词和句子练习；
• 保存学习进度并生成个性化复习内容；
• 完成登录、账号识别和模型额度管理；
• 保存你的设置、缓存必要结果并保持功能连续；
• 衡量官网内容访问和商店入口点击，改进网站；
• 防止滥用、排查故障和保障服务安全。

我们不会出售、出租个人数据，不会将网页内容或学习记录用于个性化广告，也不会出于与 LangBox 单一用途无关的目的建立浏览画像。

4. AI 模型和第三方服务

翻译和部分学习功能需要使用 AI 模型。使用 LangBox 托管模型时，完成请求所必需的文字、指令及有限上下文会经由 LangBox 服务发送给我们配置的模型提供商。你选择其他可用模型或自定义兼容服务时，相关内容将发送给你所选择的提供商，并受该提供商自身隐私政策约束。

为提供服务，我们可能使用以下类型的服务商：

• Google Firebase：登录、身份验证及官网访问统计（Google Analytics 4）；
• PostHog：网站产品使用分析、扩展匿名使用统计，以及扩展、网站和后端的错误报告；
• OpenAI、Anthropic、Google、DeepSeek、OpenRouter 或其他兼容模型提供商：翻译及语言处理；
• 云计算、数据库和内容分发服务商：运行 LangBox 后端并保存账号和学习数据；
• 开放词典、发音及媒体来源：响应用户主动发起的查词和发音请求。

我们只向服务商传输完成相应功能所必需的数据，并要求其按照合同、配置和适用政策处理数据。除提供支持、调查安全事件、履行法律义务或获得你的明确同意外，我们不会安排人员阅读你的私人内容。

5. 浏览器权限

• storage：保存设置、必要缓存和模型额度状态。
• tabs：识别当前网站、打开学习或设置页面，并在用户启用时处理新标签页学习入口。
• contextMenus：提供“使用 LangBox 翻译所选内容”的右键菜单。
• identity：完成 Google 登录及退出登录。
• alarms：低频检查已登录用户的模型额度状态。
• scripting：仅在 YouTube 页面注册随扩展打包的字幕桥接脚本，用于读取字幕轨道和同步播放时间；不下载或执行远程代码。
• 主机权限：让用户可以在其选择的网站上使用网页翻译、双语字幕、查词和词汇标记。

6. 数据保存与删除

浏览器本地的设置和缓存通常保留到你主动清除或卸载扩展为止。与账号关联的学习记录会在提供服务所需期间保留。安全日志、备份或依法必须保存的信息可能在有限期间内继续保留，之后会被删除或去标识化。

你可以在 LangBox 中调整翻译网站、学习目标和练习内容。卸载扩展会移除扩展本地数据，但不会自动删除服务器上的账号和学习记录。如需访问、更正或删除账号相关数据，请通过本页底部的联系方式提交请求。我们会在验证身份后于合理期限内处理。

7. 数据安全

我们采用与服务规模和数据性质相适应的访问控制、传输加密、身份验证和基础设施防护措施。任何互联网服务都无法保证绝对安全；若发生可能影响你权益的数据安全事件，我们会依照适用法律采取措施并在需要时通知用户。

8. 你的选择和权利

你可以不开启特定网站的翻译、不使用 Google 登录、清除本地设置或停止使用 LangBox。根据你所在地区的法律，你还可能拥有访问、更正、删除、限制处理、撤回同意或获取数据副本等权利。联系我们时，请提供足以确认账号的信息，但不要发送密码或模型密钥。

9. 未成年人

LangBox 不面向未达到其所在地区可独立同意使用在线服务年龄的儿童。若监护人认为儿童未经适当同意向我们提供了个人数据，请联系我们处理。

10. 政策更新

我们可能因功能、服务商或法律要求变化而更新本政策。更新后的版本会发布在本页面，并修改“最后更新”日期。重大变化会在合理情况下通过产品界面或其他适当方式提示。

11. 联系我们

如对本政策或个人数据处理有疑问，或希望提出数据访问、修改或删除请求，请通过 LangBox 联系页面 或 Chrome Web Store 商品详情中的开发者联系方式联系我们。

1. Scope

This Policy applies to the LangBox Chrome extension, LangBox learning pages, our website, and directly related services (collectively, “LangBox”). By installing or using LangBox, you acknowledge that you have read this Policy. If you do not agree, please stop using the relevant features.

2. Data we process

Account information

You may use some features as a guest. If you choose Google sign-in, Google Firebase Authentication processes your account identifier, email address, display name, profile image, and authentication tokens. We do not receive your Google password.

Content you ask LangBox to process

When you actively use webpage translation, subtitle translation, selected-text translation, dictionary lookup, or learning-content generation, LangBox may process the relevant visible text, selected text, subtitles, page title, and URL. We do not send an entire page to our servers or model providers merely because you opened it.

LangBox is not designed to collect passwords, payment information, medical records, or other highly sensitive data. Please do not enable translation on sensitive pages or submit such information.

Learning and usage data

To provide vocabulary, synonym, sentence, and personalized review exercises, we may store learning words, example sentences, translations, source pages, answers, correctness history, review progress, personal exclusions, language choices, and learning goals.

Shadowing recordings

When you use YouTube shadowing, the extension records one sentence through your microphone after you press the record key (up to 30 seconds). The recording is sent to LangBox services and transcribed by a model provider configured by us, to score it word by word. LangBox does not store recordings; playback happens only in your browser. Shadowing requires sign-in, and transcription uses your model allowance. Your browser manages microphone permission for youtube.com, and you can withdraw it at any time.

Website analytics

Public product and guide pages use Firebase Analytics (Google Analytics 4) to measure visits and clicks to the Chrome Web Store, including page path, page language, button position, and referring website origin. The service may use cookies, browser identifiers, and device information to measure visits. We do not send email addresses, Firebase account IDs, translated content, URL query strings, or fragments to these analytics, and do not enable them on sign-in, callback, or contact-form pages. Ad personalization and Google Signals are disabled. We respect browser Do Not Track (DNT) and Global Privacy Control (GPC) signals. A store click is not an installation.

PostHog (US region) measures product use. Before sign-in, it uses a random identifier stored in cookies and local storage; after sign-in, a dedicated hashed account identifier connects earlier activity and activity across devices. PDF and ebook events include upload, whole-document translation completion, translated previews, download clicks and file delivery, with a hashed task identifier to measure repeat use. We do not send emails, raw account or file IDs, filenames, document text or translations. Automatic click event capture remains disabled, and URLs retain only origin and path. Browser analytics respect DNT, GPC and analytics opt-out settings. Tasks uploaded with analytics enabled retain that setting so the server can report background completion after the page closes. Download events do not prove a file was saved to a device or read.

For a browser's first visit, PostHog records clicks, scrolling and page changes during its first session on public website pages to identify usability problems. We do not record browsers with an existing visit record, internal accounts, test traffic, sign-in pages, account pages or document workspaces. Recording masks page text, input values and element attributes that can contain personal content, and blocks images, audio, video, document canvases and embedded pages. It does not capture console logs or network request bodies. A cookie stores the first-session identifier for one year. Clearing browser data or changing devices can cause a visitor to be treated as new again. Recording respects the DNT, GPC and analytics opt-out settings described above.

Extension usage analytics

To learn which features are useful, the LangBox extension sends anonymous usage events to PostHog, such as install or update, turning on YouTube dual subtitles, opening bilingual dictation, the score of a checked dictation answer, and actions such as translating a page or looking up a word. Each event contains only the event name, fixed option values, the extension version, the browser interface language, and a random identifier stored locally by the extension. We do not send URLs, video IDs, page or subtitle text, translations, words, email addresses, or account IDs. You can turn off “Anonymous usage statistics” in the extension settings.

Error diagnostics

When the extension or website reports an error to PostHog, the report includes the page URL when available, the error time, version, and diagnostic details. The URL can retain its path, video ID, page ID, and route fragment to help us locate the failure. We remove URL credentials, login tokens, authorization codes, and query parameters outside a fixed allowlist. Extension error reports also include the random identifier stored locally in the extension, so we can count how many installations a failure affects. This error reporting does not collect a continuous browsing history.

Settings and technical data

LangBox stores settings such as your target language, enabled websites, translation layout, model selection, learning preferences, interface position, and necessary caches in browser storage. Our infrastructure may also process IP address, request time, device or browser type, and limited error logs as needed for security, troubleshooting, and service reliability.

3. How we use data

We use relevant data only to:

• translate webpages, selected text, and video subtitles;
• provide dictionary, pronunciation, vocabulary, and sentence exercises;
• save learning progress and create personalized reviews;
• provide sign-in, account identification, and model quota management;
• remember settings, cache necessary results, and maintain continuity; and
• measure website content visits and store-link clicks to improve the website; and
• prevent abuse, troubleshoot problems, and secure the service.

We do not sell or rent personal data. We do not use webpage content or learning history for personalized advertising, and we do not create browsing profiles for purposes unrelated to LangBox’s single language-learning purpose.

4. AI models and service providers

Translation and some learning features require AI models. When you use a LangBox-managed model, the text, instructions, and limited context necessary to complete your request may pass through LangBox services to a model provider configured by us. If you select another available model or a custom compatible service, relevant content is sent to that provider and is also governed by that provider’s privacy policy.

We may use the following categories of providers:

• Google Firebase for sign-in, authentication, and website analytics (Google Analytics 4);
• PostHog for website product analytics, anonymous extension usage analytics, and error reports from the extension, website, and backend;
• OpenAI, Anthropic, Google, DeepSeek, OpenRouter, or other compatible providers for translation and language processing;
• cloud hosting, database, and content-delivery providers to operate LangBox and store account and learning data; and
• open dictionary, pronunciation, and media sources when you request a lookup or pronunciation.

We transfer only data necessary for the requested function. We do not arrange for people to read private content except with your consent, when needed to provide support or investigate security incidents, or when required by law.

5. Browser permissions

• storage: stores settings, necessary caches, and model quota status.
• tabs: identifies the current website, opens learning or settings pages, and supports the optional learning new-tab entry.
• contextMenus: adds the user-triggered “Translate selection with LangBox” menu.
• identity: supports Google sign-in and sign-out.
• alarms: periodically refreshes model quota status for signed-in users.
• scripting: registers a bundled bridge only on YouTube to read caption tracks and synchronize playback time; it does not download or execute remote code.
• host access: enables translation, bilingual subtitles, dictionary lookup, and learning-word highlighting on websites selected by the user.

6. Retention and deletion

Browser settings and caches generally remain until you clear them or uninstall the extension. Account-linked learning data is retained while needed to provide the service. Security logs, backups, and information required by law may remain for a limited period before deletion or de-identification.

Uninstalling LangBox removes extension-local data but does not automatically delete account and learning data stored by our services. To request access, correction, or deletion of account-linked data, use the contact method below. We will verify your identity and respond within a reasonable period.

7. Security

We use access controls, encryption in transit, authentication, and infrastructure safeguards appropriate to the nature of the service and data. No internet service can guarantee absolute security. If a security incident may materially affect your rights, we will take action and provide notice as required by applicable law.

8. Your choices and rights

You can leave translation disabled for any website, use LangBox without Google sign-in where available, clear local settings, or stop using the service. Depending on your location, you may also have rights to access, correct, delete, restrict processing, withdraw consent, or obtain a copy of personal data. Never send us passwords or model keys when making a request.

9. Children

LangBox is not directed to children who are below the age at which they may independently consent to online services in their location. A parent or guardian who believes a child provided personal data without appropriate consent may contact us.

10. Changes to this Policy

We may update this Policy when our features, providers, or legal obligations change. The updated version will be posted here with a revised “Last updated” date. We will provide additional notice through the product or another appropriate channel when a change is material.

11. Contact

For questions about this Policy or requests to access, correct, or delete personal data, use the LangBox contact page or the developer contact information shown in the Chrome Web Store listing.