Privacy policy

Account

Your name, email, and profile picture from Google when you sign in.

Your words

On the website, signed-in lookups can enter your account activity. In the extension, ordinary lookups stay in local recents and never enter account history. A word reaches your account only when you explicitly save it.

Activity

Your lookup count, streak, and last active date. We use these to show your progress.

Subscription

Your plan, subscription status, and Stripe customer ID if you upgrade. We never see or store your full card number.

Feedback

A bug report or feature request can include your description, the affected Etymon page, browser type, screen size, an optional reply email, and an optional screenshot. We do not collect the contents of other pages.

Technical logs

Hosting and server logs may include your IP address, browser, the Etymon URL or API path requested, and timestamps. An extension request does not include the page you were reading. We use these logs for security, abuse prevention, and debugging.

Etymon reads only the single word you select. It does not collect or send the page URL, title, domain, surrounding sentence, DOM content, referrer, or browsing history. The selected word can be sent to the Etymon API and an AI provider to generate the result.

Instant double-click lookup is optional. The browser asks for site access only after you choose to enable it. Manual toolbar, context-menu, keyboard, and side-panel search continue to work when you decline or remove that access.

Content-free operational diagnostics are off by default and can be turned on in extension Settings. They can include the event and trigger type, extension version, browser family, interface target, signed-in and cache-hit booleans, a latency bucket, an HTTP status or normalized error category, and permission mode. They never include the selected word, page metadata, email, account name, stable analytics identifier, token, or full provider error.

Etymon's use of information received from Chrome APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Etymon uses extension data only to provide or improve its disclosed word-tracing features, keep the service secure, prevent abuse, and measure reliability. We do not use or transfer it for personalized advertising, credit decisions, or sale to data brokers. People do not read extension user data except with the user's consent for support, for security, to comply with law, or after aggregation and de-identification for internal operations.

We use account, word, activity, and plan data to provide the service you ask for. That includes sign-in, etymology results, your word collection, progress, and paid features.

We use feedback, technical data, and aggregate usage data to secure Etymon, stop abuse, fix broken flows, and decide what needs work. These uses support our legitimate interest in running a reliable service. We may also keep records when the law requires it, including billing and rights-request records.

If a future feature needs consent, we will ask first. You can withdraw that consent later. This does not undo processing that was lawful before you withdrew it.

These companies process data for the jobs listed here.

Google

Handles sign-in. We receive your name, email, and avatar.

Supabase

Stores accounts, word collections, activity data, and private feedback reports.

Resend

Delivers a private notification when someone sends product feedback.

Stripe

Handles payment methods, billing details, invoices, subscriptions, and billing self-service.

AI providers

Receive the word you search so they can help generate an etymology. We do not send your name or email with it.

Plausible

Provides cookie-free, aggregate page analytics. Personal collections and lookup-result pages are excluded. We do not send names, emails, or lookup details.

Google Analytics

With your permission, measures visits to public pages and clicks to open the explorer, view pricing, sign in, or visit the extension store using analytics cookies. Lookup results, personal collections, authentication pages, URL query strings, and form contents are excluded. Advertising features are disabled. Change or withdraw permission using Analytics preferences on this page.

Netlify

Hosts Etymon and processes the request and security logs needed to deliver it.

Each provider also follows its own legal and retention duties.

Supabase stores account and collection data in a hosted Postgres database. Database policies separate user records. Authorized server code can access them to run Etymon and respond to verified support requests. HTTPS protects data in transit. No online service can promise perfect security.

Your browser also stores recent searches and interface preferences in localStorage. Clearing browser data removes this local copy. It does not remove your server-side collection.

The extension uses browser session storage for its short-lived access token and browser local storage for the rotating device refresh token, preferences, local recents, and validated artifact cache. It does not put tokens or account data in sync storage. Clearing extension local data removes recents and cached results, not server-side saved words.

We generally keep account details, saved words, activity, and subscription status while your account exists. After a verified deletion request, we delete or de-identify account data unless we must keep a limited record for security, fraud prevention, billing, disputes, or another legal duty.

Browser data stays until you clear it or Etymon replaces it. Our hosting, authentication, analytics, payment, and AI providers use their own retention schedules. Email us for the current setting for a specific type of data.

Detailed extension operational diagnostics are kept for no more than 30 days. Short-lived abuse-prevention buckets are kept for no more than 48 hours. After those periods, Etymon may retain aggregate counts that cannot be tied to a word, page, account, or device.

We keep a feedback report while we review and act on it. We may retain a resolved report to avoid repeating the same work or to document a security or product decision. You can ask us to remove the contact details or screenshot from your report.

Depending on where you live, you may ask to access, correct, delete, restrict, object to, or receive a portable copy of your personal data. You may also complain to your local data protection authority.

See your data

Open your word collection.

Remove a word

Open it from your collection and choose Remove from collection.

Manage billing

Use Manage billing in your profile or the account area on the pricing page. Stripe shows the available plan, payment, invoice, and cancellation controls.

Delete your account

Email rumi.calles@gmail.com. We will verify the request and tell you if a limited record must remain.

Object or restrict

Email the same address and name the use you want us to stop or limit.

Extension diagnostics

Content-free diagnostics are off by default. Turn on Share diagnostics in extension Settings if you want to help measure reliability.

We use an authentication cookie to keep you signed in. Theme, script, recent-search, and cache preferences use browser storage. Plausible does not use analytics cookies. Google Analytics loads only after you allow it and uses analytics cookies. We remember your choice in browser storage. You can withdraw permission using Analytics preferences on this page. We do not use advertising cookies.

We update the date at the top when this policy changes. We will give any extra notice the law requires for a material change.

Rumi Elias Calles operates Etymon.ai and handles privacy questions and verified rights requests. Email rumi.calles@gmail.com. Do not send passwords, card numbers, or authentication tokens.