Privacy Policy

1. Who we are

This privacy policy describes how Digital Alchemy Lab (“Digital Alchemy Lab”, “we”, “us”, “our”) processes personal information for the Prodigy! browser extension on Chromium‑based browsers (Chrome, Edge, Brave, Opera, Arc, …) and the equivalent Firefox add‑on. Together these are referred to as “the extension”.

2. What the extension does

Prodigy! is a single‑purpose tool that lets you:

• translate words and short phrases by hovering or selecting them on a webpage;
• listen to selected text via text‑to‑speech (TTS);
• extract text from images on the page using local OCR;
• optionally export a translation balloon as PDF or JPEG.

A Prodigy! account is required to use the extension. Account creation is free. When you are not signed in, the extension popup shows a clear sign‑in prompt and the on‑page hover/selection features remain inactive until you sign in — the extension does not silently process page content for unsigned users. We require an account so we can:

• recognise which subscription tier (Free, Pro or Ultra) applies to you and unlock the corresponding features;
• enforce per‑account usage limits on the third‑party translation and TTS providers we relay your requests to (anti‑abuse), so that a single user cannot exhaust shared API quotas at the expense of others;
• give you a stable identity for your settings and recent items.

3. Data the extension processes

The extension processes only the categories of data listed below.

The extension does not include Google Analytics or any other analytics or tracking SDK: we do not track in‑extension page views, button clicks, or session metrics.

4. Data we do not collect

To be unambiguous, the Prodigy! extension does not collect, transmit or store:

• your web browsing history — we do not log the URLs of pages you visit, the time you spend on them, or their content;
• the full content of pages you do not interact with (we only see the text you actively select, hover or send to a Prodigy! feature);
• health or medical information;
• financial or payment card data — the extension does not take payments. Subscriptions are purchased on the Prodigy web application and processed by Stripe; the extension only reads the resulting subscription tier from our cloud database;
• communications content (chats, emails, messages), contacts or address book data;
• precise geolocation;
• biometric data;
• the credentials or session cookies of websites you visit (some web‑based translation providers, e.g. Bing Translator, rely on cookies your browser already sends to them; the extension does not read or copy those cookies);
• data about children under 13 (or under 16 in the EEA) — see section 13.

5. How we use data

We use the data described in section 3 only to:

• provide the features you ask for (translate, transliterate, speak, OCR, export);
• authenticate you and determine your subscription tier;
• protect the Service from fraud and abuse;
• fulfil our legal obligations and respond to valid legal process.

We do not:

• sell your personal information or share it with data brokers;
• use your data, including Google user data, for advertising or to build advertising profiles;
• use your data to determine credit‑worthiness or for lending purposes;
• use your data for any purpose unrelated to the features described in section 2.

6. Storage & retention

7. Third parties

We do not sell or rent personal information. The extension shares data only with the recipients listed below, and only the data needed for the listed purpose.

7.1 Service providers we use to operate the extension

7.2 Translation, TTS and image‑search providers

When you ask the extension to translate, speak, or look up an image for a piece of text, that text (and only that text, plus the languages involved) is sent to the provider you have selected for the operation. Each provider is the controller of the data it receives and its own privacy policy applies. The providers Prodigy! can use are:

• Google Translate (Google LLC) — default translator and image search.
• Google Translate TTS (Google LLC) — one of the available voices.
• Microsoft Bing Translator and Bing Read Aloud TTS (Microsoft Corporation) — alternative translator and voice.
• DeepL Translator (DeepL SE) — alternative translator.
• Naver Papago (Naver Corporation) — alternative translator.
• Yandex Translator (Yandex LLC) — alternative translator.
• Baidu Translate (Baidu Inc.) — alternative translator.
• OpenAI ChatGPT (OpenAI OpCo, LLC) — optional translator that piggybacks on a chat.openai.com session your browser already has.
• Browser‑built‑in Web Speech API (your operating system / browser vendor) — default local TTS engine; runs on your device.

We do not include your account credentials, UID, e‑mail address or any payment data in these requests.

7.3 Legal & safety

We may disclose information if we reasonably believe it is necessary to comply with a legal obligation (court order, lawful subpoena), to protect the safety, rights or property of users or the public, or to investigate fraud, abuse or security incidents.

7.4 Business transfers

If Digital Alchemy Lab is involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction. We will require the new entity to honour the commitments in this policy or notify you of any material change.

8. Limited Use of Google API data

The Prodigy! extension's use and transfer of information received from Google APIs to any other app will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. In particular:

• we limit our use of Google user data to providing or improving the user‑facing features described in section 2;
• we transfer Google user data to third parties only as needed to provide or improve those user‑facing features, to comply with applicable law, or to detect and prevent fraud or abuse;
• we do not allow humans to read Google user data unless we have your explicit consent for specific data, the data is needed for security or to comply with the law, or the data has been aggregated and anonymised for internal operations;
• we do not transfer, use, or sell Google user data for personalised advertising, to data brokers, or to determine credit‑worthiness or for lending purposes.

9. Access to web pages you visit

To work as a hover‑to‑translate tool, Prodigy! requests broad host access (access to all websites) so its content script can detect the text you hover or select on any page you visit. We use this access only to read the text you actively interact with: we do not log the URLs of pages you visit, we do not collect or transmit page content you have not selected, and we do not inject ads or rewrite page content for monetisation. The full list of technical permissions the extension declares, and the reason for each, is published in the extension's Chrome Web Store listing under “Privacy practices”.

10. Cookies and similar technologies

The extension does not set its own cookies and does not include any analytics or advertising trackers. It uses chrome.storage.local (Web Storage on Firefox) to persist your settings and recent items on your device. Any cookies that browse‑based translation providers rely on (e.g. Bing) are cookies that your browser already sends to those providers; the extension does not read or modify them.

11. Security

All requests made by the extension to our cloud services and to translation/TTS providers use TLS (HTTPS). Authentication is delegated to Google's cloud authentication service. Account and entitlement records live in our cloud database with rules that prevent users from reading or writing other users' data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

12. International transfers

Our processors (Google LLC and the translation/TTS providers in section 7) may process data in countries outside your country of residence, including the United States. Where required by law (e.g. EU/UK), these transfers rely on the European Commission's Standard Contractual Clauses or equivalent transfer mechanisms put in place by the relevant provider.

13. Children's privacy

Prodigy! is not directed at, and is not intended for use by, children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children under those ages. If you believe a child has provided personal information to us, please contact us at the address in section 16 and we will delete it.

14. Your rights

Depending on where you live, you may have rights under data‑protection laws such as the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA) and similar laws. These rights can include:

• access to the personal information we hold about you;
• correction or update of inaccurate personal information;
• deletion of your account and the personal information associated with it;
• a portable copy of your data in a common format;
• objection to or restriction of certain processing;
• withdrawal of consent (where we relied on consent);
• the right not to be subject to discrimination for exercising any of these rights;
• lodging a complaint with your local data‑protection supervisory authority.

You can sign out of the extension at any time from the popup, which clears the locally cached license state. To exercise any other right (including account and data deletion), contact us at the address in section 16. We respond within 30 days, or as required by applicable law.

15. Changes to this policy

We may update this privacy policy from time to time, for example to reflect changes in the extension or in applicable law. Material changes will be announced by updating the “Effective date” and “Last updated” values at the top of this page and, where required by law, by a more prominent notice or by e‑mail to your account address. The previous version remains available on request.

16. Contact us

If you have any questions or requests regarding this privacy policy or your personal information, please contact our privacy team:

Digital Alchemy Lab — Privacy Contact
E‑mail: com.prodigy.app@gmail.com