Privacy Policy

Last updated: February 11, 2026

ClipCard is a language learning tool consisting of a Chrome extension and web application. It is operated by a solo developer. This policy explains what data ClipCard collects, how it is used, and your choices.

Information We Collect

Account Information

When you sign in with Google, we receive your:

• Email address
• Display name
• Profile picture

This information is used to identify your account and personalize the service.

Lookup Data

When you use ClipCard to look up a word or phrase, we process the selected text along with its surrounding context, and the page URL and title. For authenticated users, the resulting definitions and translations are stored in your account so you can review them later.

Learning Data

ClipCard uses spaced repetition to help you learn vocabulary. We store review scheduling data including next review date, difficulty rating, and accuracy history.

Analytics Data

We use PostHog for product analytics in both the web app and Chrome extension. This includes page views, button clicks, feature usage events, and session recordings. When you are authenticated, analytics data is linked to your user ID. See the Analytics section below for more details.

Local Browser Storage

The Chrome extension stores the following data locally on your device:

• Authentication tokens
• Cached profile information
• Settings (target language, disabled sites, local AI preference)

This data never leaves your device unless you are authenticated and actively using the service.

How We Use Your Data

• Provide definitions, translations, and pronunciation for selected text
• Save your lookup history so you can review past lookups
• Power spaced repetition learning across your saved vocabulary
• Improve the service based on usage patterns and analytics

Data Processing

Cloud Processing (Default)

By default, selected text is sent to api.clipcard.co and processed using Cloudflare Workers AI to generate definitions and translations. The page URL and title are also sent to provide context.

Local Processing (Optional)

If you enable the "Local AI" option in settings, Chrome's built-in AI processes your selected text entirely on your device. When using local processing, the page URL and title are not sent to ClipCard's servers. Note that authentication and history syncing still require network requests.

Analytics (PostHog)

ClipCard uses PostHog for product analytics in both the web app and the Chrome extension. PostHog collects:

• Page views and navigation events
• Feature usage events (e.g., lookups, reviews, settings changes)
• User identification (linked to your authenticated user ID)
• Session recordings (to understand how users interact with the product)
• Feature flag evaluations

Analytics data is sent to PostHog's servers (PostHog Cloud). PostHog respects the browser's Do Not Track setting. You can also opt out of analytics by enabling Do Not Track in your browser settings.

Data Sharing

We do not sell your personal data. ClipCard does not display ads. We share data only with the following third-party services necessary to operate the product:

• Google — OAuth authentication
• Cloudflare — Infrastructure, AI processing, data storage
• PostHog — Product analytics and session recordings

Browser Extension Permissions

The ClipCard Chrome extension requests the following permissions:

• <all_urls> — Allows ClipCard to detect text selection on any webpage so you can look up words anywhere
• activeTab — Accesses the current tab's URL and title to provide context for lookups
• storage — Stores your settings, cached profile, and authentication tokens locally
• identity — Handles Google OAuth sign-in within the extension
• scripting — Injects the ClipCard popup into web pages when you select text
• declarativeNetRequestWithHostAccess — Redirects PDF files to ClipCard's built-in PDF viewer so you can look up words in PDFs
• webNavigation — Detects page navigation to properly initialize ClipCard on new pages

Data Retention & Deletion

Your data is retained for as long as your account is active. You can delete individual items from your lookup history at any time via the ClipCard dashboard. To request full account deletion, contact us at support@clipcard.co.

Security

We take reasonable measures to protect your data:

• All data is transmitted over HTTPS
• OAuth authentication uses PKCE for security
• Access tokens are short-lived
• Infrastructure runs on Cloudflare's edge network

Children's Privacy

ClipCard is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.

Contact

If you have questions about this privacy policy, contact us at support@clipcard.co.