Privacy Policy

Last Updated: January 1, 2026

Introduction

Immerse ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our language learning web application and Chrome browser extension.

Information We Collect

Account Information

When you register for Immerse, we collect:

  • Email address
  • Username
  • Password (stored as a cryptographic hash, never in plain text)
  • Target language preference
  • Current proficiency level (A0-C2 CEFR scale)
  • Vocabulary count and completed skills

Extension Usage Data

Our Chrome extension collects:

  • Auto-translate domain preferences (stored locally on your device)
  • Translation requests (webpage content sent to our AI provider)
  • Your proficiency level to customize translation difficulty

Browsing Data

When you use the translation feature:

  • We process webpage content you choose to translate
  • URLs are processed but not permanently stored
  • Content is sent to OpenAI's API for translation services

How We Use Your Information

We use your information to:

  • Provide personalized language translation services
  • Track your learning progress and vocabulary growth
  • Customize translation difficulty to match your proficiency level
  • Authenticate you across our web platform and browser extension
  • Improve our services and user experience

Third-Party Service Providers

We share data with the following third parties:

OpenAI

  • Purpose: AI-powered translation services
  • Data Shared: Webpage content for translation, user proficiency level
  • Data Retention: Maximum 30 days for abuse monitoring (per OpenAI's policy)
  • Privacy Policy: https://openai.com/policies/row-privacy-policy/

Railway.app

  • Purpose: Backend hosting infrastructure
  • Data Shared: All account and usage data (as our hosting provider)

We do not sell your personal information to third parties.

Data Storage and Security

We implement industry-standard security measures:

  • Passwords are hashed using Werkzeug cryptographic functions
  • All data transmission uses HTTPS encryption
  • PostgreSQL database with secure access controls
  • Session-based authentication with secure cookies
  • Local browser storage (chrome.storage.local) for extension preferences

Your Privacy Rights

Depending on your location, you may have the following rights:

GDPR Rights (EU Users)

  • Access your personal data
  • Correct inaccurate data
  • Request data deletion ("right to be forgotten")
  • Export your data (data portability)
  • Restrict or object to data processing
  • Withdraw consent at any time

CCPA Rights (California Users)

  • Know what personal information we collect
  • Access your personal information
  • Request deletion of your data
  • Opt-out of data sales (we do not sell data)

To exercise these rights, please contact us using the information provided at the end of this policy.

Data Retention

  • Account Data: Retained until you delete your account
  • OpenAI Translation Data: Maximum 30 days (per OpenAI's retention policy)
  • Session Data: Until logout or session expiration

Chrome Extension Permissions

Our extension requests the following permissions:

  • storage: To save your login credentials and preferences locally
  • host_permissions (<all_urls>): To enable translation on any website you visit

We only collect data necessary for translation functionality. Your browsing history is not tracked or stored.

Cookies and Local Storage

  • Session Cookies: Used for authentication (deleted when you log out)
  • Chrome Local Storage: Stores your login credentials and auto-translate preferences locally on your device
  • No Tracking Cookies: We do not use third-party tracking or advertising cookies

International Data Transfers

Your data may be transferred to and processed in the United States, where our servers and service providers are located. We ensure appropriate safeguards are in place for international transfers.

Children's Privacy

Immerse is not intended for users under 13 years of age (16 in the EU). We do not knowingly collect data from children.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

  • Posting the new policy on this page
  • Updating the "Last Updated" date
  • Sending an email notification (for material changes)

We review and update this policy at least annually.

Do Not Sell My Personal Information

We do not sell personal information to third parties. California residents can learn more about their CCPA rights in the "Your Privacy Rights" section above.

Contact Us

For privacy-related questions or to exercise your rights, please contact us at:

By using Immerse, you consent to this Privacy Policy.