Lanmma Privacy Policy
Chrome Extension

Privacy Policy

Last updated: May 3, 2026 Effective date: May 3, 2026 Version 1.0.1
Summary: Lanmma is built with your privacy in mind. We collect minimal data — stored entirely on your device — and we never sell it. This document explains exactly what we do (and don't do) with your information.
Table of contents
  1. What this extension does
  2. Data we collect
  3. How we use your data
  4. Permissions & why we need them
  5. Third-party services
  6. Data storage & security
  7. Your rights
  8. Children's privacy
  9. Changes to this policy
  10. Contact us
01

What this extension does

Purpose & scope of the extension

Lanmma is a Chrome browser extension developed by Mohamed Saeed. Its primary purpose is to help users learn languages naturally from YouTube by clicking any word in the video captions to receive instant AI-powered translation, contextual analysis, synonyms, usage examples, and pronunciation.

This Privacy Policy applies to the Lanmma Extension. By installing or using the Extension, you agree to the practices described in this policy.

02

Data we collect

What information the extension accesses or stores

Data type Collected? Details
Personal information
(name, email, address)
✗ No We do not collect any personally identifiable information. No account creation is required to use the Extension.
Browsing history ✗ No The Extension does not store or transmit your browsing history. It reads the URL of the currently active tab only to detect whether you are on a YouTube watch page (youtube.com/watch), and this check is performed locally — no URL data is ever sent anywhere.
API Keys (user-provided) ✓ Yes Your Google Gemini API key (required) and ElevenLabs API key (optional) are stored locally using Chrome's chrome.storage.local API. The Gemini key can also be saved automatically if you use the optional Auto Setup feature — it is captured at the exact moment you click "Copy Key" in Google AI Studio and is saved directly to local storage without ever passing through any server. These keys are never transmitted to the developer or any third party other than the respective API services when you actively request an analysis.
User preferences & saved words ✓ Yes Your settings (language, theme, performance mode) and your saved vocabulary library (word, translation, video reference, timestamp) are stored locally using chrome.storage.local. This data never leaves your device.
Video transcript & clicked words Processed When you click a word in the captions, the word and a short surrounding transcript excerpt (up to ~1,200 characters) are sent to the Google Gemini API for analysis. This data is sent solely to generate a response and is subject to Google's API Terms of Service. The developer does not receive or store this data.
Usage / analytics data ✗ No We do not collect any analytics, crash reports, or usage statistics.
Payment data ✗ No The Extension is free and does not process any payments.
Bottom line: The developer receives zero data from your usage. All storage is local on your device, and API calls go directly from your browser to the respective service (Google / ElevenLabs) using your own API key.
03

How we use your data

Purposes for processing any collected information

Any data that is stored or processed is used only for the following purposes:

  • To provide and operate the core features of the Extension (word analysis, translation, pronunciation)
  • To remember your preferences and saved vocabulary across browser sessions
  • To send your clicked word and its transcript context to the Google Gemini API for AI analysis, using your own API key
  • To send a word to ElevenLabs or Google Translate for pronunciation, if you trigger the audio feature

We explicitly do not:

  • Sell, rent, or share your data with any third party
  • Use your data for advertising or targeted marketing
  • Build profiles about you or track your behavior across websites
  • Collect analytics or usage statistics
  • Receive or store any data on the developer's servers — no backend exists
04

Permissions & why we need them

Chrome extension manifest permissions explained

Lanmma requests only the permissions strictly required for its core functionality. Below is a plain-language explanation of every permission in our manifest.json.

storage

Used to save your API keys, selected language, theme, performance mode, and saved vocabulary library locally in your browser via chrome.storage.local. No data is sent to any server.

https://www.youtube.com/*

Required to inject the caption overlay and intercept YouTube's subtitle network requests so the transcript can be read and synchronized locally. No YouTube data is transmitted to external servers by Lanmma.

https://generativelanguage.googleapis.com/*

Required to send word analysis and translation requests directly from your browser to the Google Gemini API using your own API key.

https://api.elevenlabs.io/*

Required for the optional premium text-to-speech feature. Only used if you provide an ElevenLabs API key and trigger audio playback.

https://translate.google.com/*

Used as a free text-to-speech fallback when ElevenLabs is not configured. Only the spoken word is sent; no browsing data is included.

https://aistudio.google.com/*

Used exclusively for the optional Auto Setup feature. The Extension is inactive on this page unless you initiate setup via the onboarding. It activates only when the URL contains ?lanmma_setup=true, then it shows a guide arrow and — only when you click the "Copy Key" button — reads your newly created key directly from the page and saves it to local storage. The tab is closed automatically 3.5 seconds after the key is captured.

Note on hardware detection: The Extension reads navigator.hardwareConcurrency (CPU core count) locally and one-time only, to automatically enable a Low Performance Mode on weaker devices for a smoother UI. This value is never stored, transmitted, or used for fingerprinting.
05

Third-party services

External tools and services we integrate with

Lanmma integrates with the following external API services. Each service receives only the minimum data required for its specific function, and none of these are used for analytics, advertising, or tracking:

ServicePurposeData sentRequired?Their policy
Google Gemini API AI word analysis & sentence translation Clicked word + surrounding transcript excerpt (~1,200 chars max) + your chosen language. Sent using your own API key. Required View ↗
ElevenLabs API Premium text-to-speech pronunciation The word or sentence to be spoken. Sent using your own ElevenLabs API key. Optional View ↗
Google Translate TTS Free text-to-speech fallback (when ElevenLabs is not configured) The word or sentence to be spoken. No API key required. Fallback View ↗
Google AI Studio One-time optional Auto Setup — guides you through creating a Gemini API key No data is sent to AI Studio by Lanmma. The Extension activates only when you initiate the setup and reads the key solely at the moment you click "Copy Key", saving it directly to your local extension storage. Optional View ↗
The developer does not operate any backend server. All API calls go directly from your browser to Google or ElevenLabs using your own credentials. We are not responsible for the privacy practices of these third-party services and encourage you to review their respective policies linked above.
06

Data storage & security

Where your data lives and how it's protected

All user preferences are stored locally on your device using Chrome's chrome.storage.local API. This data is managed by Chrome and subject to Chrome's own security model. It is automatically deleted when you uninstall the Extension.

API calls to Google Gemini and ElevenLabs are made over HTTPS directly from your browser. Your API keys are stored in chrome.storage.local, which is sandboxed to the Extension and inaccessible to websites or other extensions. If you discover a security vulnerability, please contact us at mohamed.saeed162005@gmail.com.

Data retention: All locally stored data (API keys, vocabulary library, preferences) persists until you uninstall the Extension or clear it manually via Chrome's settings (chrome://extensions → Lanmma → Clear data). Since we operate no backend, there is no server-side data to delete.
07

Your rights

Control over your data (GDPR, CCPA & general)

Regardless of your location, you have the following rights regarding your data:

  • Access — All stored data lives on your device. You can inspect it directly via Chrome DevTools → Application → Storage → Extension Storage.
  • Deletion — Uninstalling Lanmma permanently deletes all locally stored data (API keys, vocabulary library, preferences). Since we operate no backend, there is no server-side data to delete.
  • Control over AI requests — You can stop all AI processing at any time by removing your Gemini API key from the Extension settings or by disabling the Extension entirely.
  • No analytics to opt out of — We collect no usage statistics, so there is nothing to disable.

If you are located in the European Economic Area (EEA), you also have the right to lodge a complaint with your local data protection authority.

For any privacy-related questions, contact us at mohamed.saeed162005@gmail.com. We will respond within 30 days.

08

Children's privacy

COPPA compliance

The Extension is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided personal information through the Extension, please contact us at mohamed.saeed162005@gmail.com and we will promptly delete such information.

09

Changes to this policy

How we notify you of updates

We may update this Privacy Policy from time to time to reflect changes in the Extension, legal requirements, or our practices. When we do:

  • The "Last updated" date at the top of this page will be revised.
  • For significant changes, we will notify you via a notice in the Chrome Web Store listing and/or a visible note in the extension popup.

Your continued use of the Extension after a policy update constitutes your acceptance of the revised policy. If you do not agree, please uninstall the Extension.

10

Contact us

Questions, requests, and concerns

If you have any questions, concerns, or requests regarding this Privacy Policy or the Extension's data practices, please reach out:

✉️

Developer
Mohamed Saeed

Email
mohamed.saeed162005@gmail.com

GitHub
github.com/MoSaeed450

Country / Region
Egypt