隐私政策 Privacy Policy

1. 适用范围

本政策适用于 LangBox Chrome 扩展、LangBox 学习页面、官方网站及与其直接相关的服务（合称“LangBox”）。安装或使用 LangBox，即表示你已阅读本政策。若你不同意其中内容，请停止使用相关功能。

2. 我们处理哪些数据

账号信息

你可以以访客身份使用部分功能。选择 Google 登录时，我们会通过 Google Firebase Authentication 处理账号标识、电子邮箱、显示名称和头像等由 Google 提供的基本资料，并使用身份令牌确认你的登录状态。我们不会获得你的 Google 密码。

用户主动提交或要求处理的内容

当你主动开启网页翻译、字幕翻译、划词翻译、查词或学习内容生成功能时，LangBox 可能处理当前页面中与请求有关的可见文字、所选文字、字幕、页面标题和网址。我们不会仅因为你打开了一个网页，就把整段浏览内容发送到服务器或模型服务。

LangBox 不以收集密码、支付信息、医疗记录或其他高度敏感信息为目的。请不要在包含敏感个人信息的页面上启用翻译或提交此类内容。

学习与使用数据

为提供单词练习、近义词练习、句子练习和个性化复习，我们可能保存学习词汇、例句、翻译结果、来源页面、练习答案、正确或错误记录、复习进度、个人黑名单以及学习语言和目标等信息。

官网访问统计

官网的公开介绍和指南页面使用 Firebase Analytics（Google Analytics 4）统计访问与前往 Chrome 商店的点击，包括页面路径、页面语言、按钮位置和来源网站域名。统计服务可能使用 Cookie、浏览器标识及设备信息来衡量访问。我们不向该统计发送邮箱、Firebase 账号 ID、翻译内容、网址查询参数或片段，也不在登录、回调和联系表单页面启用它。我们关闭广告个性化和 Google Signals，并尊重浏览器的“请勿跟踪”（DNT）和全球隐私控制（GPC）信号。商店点击不等于安装。

设置和技术数据

LangBox 会在浏览器本地保存目标语言、启用翻译的网站、翻译布局、模型选择、学习偏好、界面位置及必要缓存。我们的服务器和基础设施还可能处理完成请求所需的 IP 地址、时间、设备或浏览器类型以及有限的错误日志，用于安全防护、故障诊断和服务稳定性。

3. 我们如何使用数据

我们仅将相关数据用于：

• 翻译网页、所选文字和视频字幕；
• 提供查词、发音、单词和句子练习；
• 保存学习进度并生成个性化复习内容；
• 完成登录、账号识别和模型额度管理；
• 保存你的设置、缓存必要结果并保持功能连续；
• 衡量官网内容访问和商店入口点击，改进网站；
• 防止滥用、排查故障和保障服务安全。

我们不会出售、出租个人数据，不会将网页内容或学习记录用于个性化广告，也不会出于与 LangBox 单一用途无关的目的建立浏览画像。

4. AI 模型和第三方服务

翻译和部分学习功能需要使用 AI 模型。使用 LangBox 托管模型时，完成请求所必需的文字、指令及有限上下文会经由 LangBox 服务发送给我们配置的模型提供商。你选择其他可用模型或自定义兼容服务时，相关内容将发送给你所选择的提供商，并受该提供商自身隐私政策约束。

为提供服务，我们可能使用以下类型的服务商：

• Google Firebase：登录、身份验证及官网访问统计（Google Analytics 4）；
• OpenAI、Anthropic、Google、DeepSeek、OpenRouter 或其他兼容模型提供商：翻译及语言处理；
• 云计算、数据库和内容分发服务商：运行 LangBox 后端并保存账号和学习数据；
• 开放词典、发音及媒体来源：响应用户主动发起的查词和发音请求。

我们只向服务商传输完成相应功能所必需的数据，并要求其按照合同、配置和适用政策处理数据。除提供支持、调查安全事件、履行法律义务或获得你的明确同意外，我们不会安排人员阅读你的私人内容。

5. 浏览器权限

• storage：保存设置、必要缓存和模型额度状态。
• tabs：识别当前网站、打开学习或设置页面，并在用户启用时处理新标签页学习入口。
• contextMenus：提供“使用 LangBox 翻译所选内容”的右键菜单。
• identity：完成 Google 登录及退出登录。
• alarms：低频检查已登录用户的模型额度状态。
• scripting：仅在 YouTube 页面注册随扩展打包的字幕桥接脚本，用于读取字幕轨道和同步播放时间；不下载或执行远程代码。
• 主机权限：让用户可以在其选择的网站上使用网页翻译、双语字幕、查词和词汇标记。

6. 数据保存与删除

浏览器本地的设置和缓存通常保留到你主动清除或卸载扩展为止。与账号关联的学习记录会在提供服务所需期间保留。安全日志、备份或依法必须保存的信息可能在有限期间内继续保留，之后会被删除或去标识化。

你可以在 LangBox 中调整翻译网站、学习目标和练习内容。卸载扩展会移除扩展本地数据，但不会自动删除服务器上的账号和学习记录。如需访问、更正或删除账号相关数据，请通过本页底部的联系方式提交请求。我们会在验证身份后于合理期限内处理。

7. 数据安全

我们采用与服务规模和数据性质相适应的访问控制、传输加密、身份验证和基础设施防护措施。任何互联网服务都无法保证绝对安全；若发生可能影响你权益的数据安全事件，我们会依照适用法律采取措施并在需要时通知用户。

8. 你的选择和权利

你可以不开启特定网站的翻译、不使用 Google 登录、清除本地设置或停止使用 LangBox。根据你所在地区的法律，你还可能拥有访问、更正、删除、限制处理、撤回同意或获取数据副本等权利。联系我们时，请提供足以确认账号的信息，但不要发送密码或模型密钥。

9. 未成年人

LangBox 不面向未达到其所在地区可独立同意使用在线服务年龄的儿童。若监护人认为儿童未经适当同意向我们提供了个人数据，请联系我们处理。

10. 政策更新

我们可能因功能、服务商或法律要求变化而更新本政策。更新后的版本会发布在本页面，并修改“最后更新”日期。重大变化会在合理情况下通过产品界面或其他适当方式提示。

11. 联系我们

如对本政策或个人数据处理有疑问，或希望提出数据访问、修改或删除请求，请通过 LangBox 联系页面 或 Chrome Web Store 商品详情中的开发者联系方式联系我们。

1. Scope

This Policy applies to the LangBox Chrome extension, LangBox learning pages, our website, and directly related services (collectively, “LangBox”). By installing or using LangBox, you acknowledge that you have read this Policy. If you do not agree, please stop using the relevant features.

2. Data we process

Account information

You may use some features as a guest. If you choose Google sign-in, Google Firebase Authentication processes your account identifier, email address, display name, profile image, and authentication tokens. We do not receive your Google password.

Content you ask LangBox to process

When you actively use webpage translation, subtitle translation, selected-text translation, dictionary lookup, or learning-content generation, LangBox may process the relevant visible text, selected text, subtitles, page title, and URL. We do not send an entire page to our servers or model providers merely because you opened it.

LangBox is not designed to collect passwords, payment information, medical records, or other highly sensitive data. Please do not enable translation on sensitive pages or submit such information.

Learning and usage data

To provide vocabulary, synonym, sentence, and personalized review exercises, we may store learning words, example sentences, translations, source pages, answers, correctness history, review progress, personal exclusions, language choices, and learning goals.

Website analytics

Public product and guide pages use Firebase Analytics (Google Analytics 4) to measure visits and clicks to the Chrome Web Store, including page path, page language, button position, and referring website origin. The service may use cookies, browser identifiers, and device information to measure visits. We do not send email addresses, Firebase account IDs, translated content, URL query strings, or fragments to these analytics, and do not enable them on sign-in, callback, or contact-form pages. Ad personalization and Google Signals are disabled. We respect browser Do Not Track (DNT) and Global Privacy Control (GPC) signals. A store click is not an installation.

Settings and technical data

LangBox stores settings such as your target language, enabled websites, translation layout, model selection, learning preferences, interface position, and necessary caches in browser storage. Our infrastructure may also process IP address, request time, device or browser type, and limited error logs as needed for security, troubleshooting, and service reliability.

3. How we use data

We use relevant data only to:

• translate webpages, selected text, and video subtitles;
• provide dictionary, pronunciation, vocabulary, and sentence exercises;
• save learning progress and create personalized reviews;
• provide sign-in, account identification, and model quota management;
• remember settings, cache necessary results, and maintain continuity; and
• measure website content visits and store-link clicks to improve the website; and
• prevent abuse, troubleshoot problems, and secure the service.

We do not sell or rent personal data. We do not use webpage content or learning history for personalized advertising, and we do not create browsing profiles for purposes unrelated to LangBox’s single language-learning purpose.

4. AI models and service providers

Translation and some learning features require AI models. When you use a LangBox-managed model, the text, instructions, and limited context necessary to complete your request may pass through LangBox services to a model provider configured by us. If you select another available model or a custom compatible service, relevant content is sent to that provider and is also governed by that provider’s privacy policy.

We may use the following categories of providers:

• Google Firebase for sign-in, authentication, and website analytics (Google Analytics 4);
• OpenAI, Anthropic, Google, DeepSeek, OpenRouter, or other compatible providers for translation and language processing;
• cloud hosting, database, and content-delivery providers to operate LangBox and store account and learning data; and
• open dictionary, pronunciation, and media sources when you request a lookup or pronunciation.

We transfer only data necessary for the requested function. We do not arrange for people to read private content except with your consent, when needed to provide support or investigate security incidents, or when required by law.

5. Browser permissions

• storage: stores settings, necessary caches, and model quota status.
• tabs: identifies the current website, opens learning or settings pages, and supports the optional learning new-tab entry.
• contextMenus: adds the user-triggered “Translate selection with LangBox” menu.
• identity: supports Google sign-in and sign-out.
• alarms: periodically refreshes model quota status for signed-in users.
• scripting: registers a bundled bridge only on YouTube to read caption tracks and synchronize playback time; it does not download or execute remote code.
• host access: enables translation, bilingual subtitles, dictionary lookup, and learning-word highlighting on websites selected by the user.

6. Retention and deletion

Browser settings and caches generally remain until you clear them or uninstall the extension. Account-linked learning data is retained while needed to provide the service. Security logs, backups, and information required by law may remain for a limited period before deletion or de-identification.

Uninstalling LangBox removes extension-local data but does not automatically delete account and learning data stored by our services. To request access, correction, or deletion of account-linked data, use the contact method below. We will verify your identity and respond within a reasonable period.

7. Security

We use access controls, encryption in transit, authentication, and infrastructure safeguards appropriate to the nature of the service and data. No internet service can guarantee absolute security. If a security incident may materially affect your rights, we will take action and provide notice as required by applicable law.

8. Your choices and rights

You can leave translation disabled for any website, use LangBox without Google sign-in where available, clear local settings, or stop using the service. Depending on your location, you may also have rights to access, correct, delete, restrict processing, withdraw consent, or obtain a copy of personal data. Never send us passwords or model keys when making a request.

9. Children

LangBox is not directed to children who are below the age at which they may independently consent to online services in their location. A parent or guardian who believes a child provided personal data without appropriate consent may contact us.

10. Changes to this Policy

We may update this Policy when our features, providers, or legal obligations change. The updated version will be posted here with a revised “Last updated” date. We will provide additional notice through the product or another appropriate channel when a change is material.

11. Contact

For questions about this Policy or requests to access, correct, or delete personal data, use the LangBox contact page or the developer contact information shown in the Chrome Web Store listing.