Privacy Policy

Last updated: October 12, 2026

Overview

Olemma ("the extension") is a browser extension for learning vocabulary. Your privacy is important to us. This policy explains what data we collect and how we use it.

Data We Collect

Without an account (default)

By default, the extension stores all data locally in your browser. We do not collect, transmit, or have access to any of your data. Your dictionary, review progress, and settings remain entirely on your device.

With an account (optional sync)

If you choose to sign in with Google to sync your dictionary across devices, we collect:

• Email address — to identify your account
• Dictionary entries — words, translations, and notes you save
• Review progress — your spaced repetition history and statistics
• Settings — your learning preferences (daily goals, rest days, etc.)
• Notification subscription — if you enable review reminders, the browser-provided push endpoint and encryption keys plus your chosen reminder time

How We Use Your Data

• To sync your dictionary and progress across your devices
• To restore your data if you sign in on a new device
• To send an optional daily notification with the number of account words ready to review

We do not:

• Sell your data to third parties
• Use your data for advertising
• Share your data with anyone except as required by law
• Use your data to train AI models

Data Storage and Security

Account data is stored on servers in Germany (Hetzner). Data is transmitted over HTTPS and stored in a PostgreSQL database. Session tokens are randomly generated and can be revoked at any time by signing out.

Data Retention

• Your data is retained as long as your account is active
• You can export all your data at any time from Settings
• You can delete your account at any time from Settings
• Deleted accounts are permanently removed after 30 days

Your Rights

You have the right to:

• Access your data (via the Export feature)
• Delete your data (via the Delete Account feature)
• Use the extension without an account

Third-Party Services

When you sign in, we use Google OAuth for authentication. Google's privacy policy applies to the authentication process. We only receive your email address and do not access any other Google data.

Services your browser contacts directly

Some features look things up on public services. These requests go from your browser straight to the service, not through our servers, and carry no account information. Translation: when Chrome cannot translate on your device, the text you asked to translate is sent to Google Translate and MyMemory. Definitions, suggestions and pronunciation: the word is sent to Wiktionary, and recordings load from Wikimedia.

Reading in Learn: the title of the article you open is sent to Wikipedia in the language you are learning, and the text loads from there. A word you select in the text is translated as above, and may also be sent to the English Wiktionary to suggest its dictionary form. Each service sees your IP address and browser, as any website does, and its own privacy policy applies.

Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated through the extension or our website.

Contact

For privacy-related questions, contact: [email protected]