BuddyWolfyBuddyWolfy

Privacy Policy for BuddyWolfy Extension

Last updated: April 25, 2026

1. Information We Collect

1.1 Account Information

  • Email address and password (used only to sign you in)
  • Your account profile (id, email, name, role, email verification status) returned by our server after sign-in
  • Authentication tokens (access token and refresh token) issued by our server

1.2 Content You Explicitly Submit

  • Words or phrases you select on a webpage and explicitly choose to analyze (sent to our server for vocabulary analysis)
  • Text you select and explicitly choose to translate (sent to our server for translation)

1.3 Preferences and Local Settings

  • Selected vocabulary group and last-used language
  • Translation source and target language preferences
  • Theme preference (system, light, or dark)
  • List of websites where you have disabled the extension
  • Temporary "disable for 1 hour" timestamp

2. What We Do NOT Collect

  • We do not read or collect the content of webpages you visit. The extension only reads the text you explicitly select.
  • We do not track your browsing history, URLs, clicks, scroll, or typing.
  • We do not collect or transmit your IP address, device identifiers, or location.
  • We do not use analytics, telemetry, error tracking, or advertising SDKs of any kind.
  • We do not read or write browser cookies. The extension does not request the cookies permission.

3. How We Use Information

  • To authenticate you with your BuddyWolfy account
  • To analyze words you submit and add them to your vocabulary groups
  • To translate text you explicitly request to translate
  • To remember your preferences locally between sessions

4. Data Storage

All extension data is stored locally on your device using the browser's extension storage API (chrome.storage.local). The extension does not use browser cookies, localStorage, or sessionStorage.

The following items are stored locally:

  • accessToken — Authentication token. Cleared on logout.
  • customer — Your account profile (id, email, name, role, email verification status).
  • lastLanguage, lastGroupId, lastGroupName — Your last-used vocabulary group and language.
  • lastSourceLang, lastTargetLang — Your translation language preferences.
  • theme — Your UI theme preference.
  • excludedSites — List of hostnames where you have disabled the extension.
  • disabledUntil — Timestamp until which the extension is temporarily disabled.
  • selectedWord, pendingAction — Temporary state used to pass actions between the content script and the popup. Overwritten on each use.

You can clear all extension data at any time by removing the extension or by using your browser's extension storage controls. Doing so will sign you out.

5. Data Sharing

  • We do not sell or share your data with third parties.
  • All network requests are made over HTTPS to https://buddywolfy.com. The extension cannot reach any other domain (this is enforced by its manifest).
  • The extension popup loads the "Nunito Sans" font from Google Fonts (fonts.googleapis.com, fonts.gstatic.com) for display only. No personal data is sent to Google.
  • We do not use third-party analytics, advertising networks, or marketing trackers.

6. Permissions Explained

  • storage — Required to save your sign-in tokens and preferences locally on your device, as described in section 4.
  • activeTab — Used only to read the hostname of the current tab so the extension can check whether you have disabled it on that site. The extension does not collect URLs or page content.
  • contextMenus — Required to add the "Analyze with BuddyWolfy" option to your right-click menu when you select text.
  • Host permission for https://buddywolfy.com/* — The only domain the extension is allowed to communicate with.

7. Content Script Behavior

The extension runs a content script on webpages so it can respond when you select text. It only reads the text you have explicitly selected (when between 1 and 800 characters and not inside an input or editable field). It reads the page's hostname to check whether the site is on your excluded list. No other page content, metadata, or browsing activity is accessed or transmitted. Data is only sent to our server when you explicitly click the "Analyze" or "Translate" button.

8. Contact

For questions about this privacy policy, contact: [email protected]