Privacy Policy

Effective 8 November 2026 · Applies to the GlyphLens browser extension

GlyphLens translates Chinese and Japanese text in a region you select on a web page. This policy explains what the extension handles, where that data goes, and the choices you have.

What GlyphLens handles

The selected region

When you activate GlyphLens, Chrome captures the visible tab locally so the extension can show its selection frame. The full screenshot stays in the page's memory during that selection session. After you draw a frame and start a translation, GlyphLens crops the screenshot to that frame, encodes the crop as JPEG, and sends only the crop. The full screenshot is not transmitted by GlyphLens.

The translation request

The request contains the cropped image, a fixed OCR and translation prompt, the target language, any additional instructions you entered, the image dimensions, and the model name. We do not add the page URL, cookies, form data, or browsing history to the request.

Settings and credentials

GlyphLens stores its settings in chrome.storage.local inside your browser profile. These settings include endpoint URLs, model names, the selected provider preset, target language, optional instructions, timeout and image-size limits, JSON mode, an optional fallback endpoint, and optional API keys. This data is not synced to your GitHub or Google account, and the extension restricts storage access to trusted extension contexts.

No translation history

GlyphLens does not keep a history of screenshots, source text, or translations.

Where your data goes

GlyphLens sends the crop directly from your browser to the endpoint you configure. That endpoint can be a local server such as Ollama, LM Studio, or llama.cpp, or a cloud provider such as OpenAI, OpenRouter, DeepSeek, Anthropic Claude, or another OpenAI-compatible service. If you configure a fallback endpoint, the same crop may be sent there if the primary endpoint fails. We do not operate a relay and do not receive the crop or the translation.

Your API key is sent as a Bearer token only to the endpoint it belongs to. GlyphLens requests host permission for the exact endpoint origin when you save or test your settings.

The endpoint provider's privacy policy applies to data it receives. A local endpoint keeps the data on your device or local network. A cloud endpoint may retain or process the data under its own terms; review that provider's policy before using it with sensitive content.

What we do not do

• We do not receive the crop, the translation, or your API key.
• We do not use telemetry, analytics, crash reporting, or remote advertising assets.
• We do not sell, rent, or share extension data with anyone other than the endpoint you configure.
• We do not use user data for personalized or retargeted advertising.
• We do not read cookies, form fields, clipboard contents, or keystrokes through GlyphLens.
• We do not allow humans to read user data, except where you have given explicit consent, where necessary for security, or where required by law.

Retention and deletion

Your settings and API keys remain in chrome.storage.local until you change them, clear the extension's storage, or uninstall GlyphLens. Removing the extension removes this local data from your browser profile.

We hold no server-side copy of extension data, so there is nothing for us to delete. For data held by your endpoint provider, use that provider's deletion tools or contact the provider directly. If you use a local endpoint, delete any logs or model data according to that server's configuration.

Security

GlyphLens sends requests only to the endpoint you configure. Use HTTPS for any remote endpoint; plain HTTP is appropriate only for a local loopback server you control. API keys are stored locally and are sent only to their configured endpoint. Error details shown inside the extension are redacted for the configured API key.

No method of local storage or network transmission is completely secure. Protect your browser profile and the server that holds your endpoint and API keys.

Chrome Web Store Limited Use

GlyphLens uses user data only to provide its single purpose: translating Chinese and Japanese text in a region the user selects. Its use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not sell user data, use it for personalized advertising, or allow humans to read it, except where the user has given explicit consent, where necessary for security, or where required by law.

This website

This policy is hosted on GitHub Pages. The page is static, sets no cookies, and runs no analytics or third-party scripts. GitHub, as the hosting provider, may log visitor IP addresses for security and abuse prevention, as described in GitHub's Privacy Statement. The GlyphLens extension itself does not contact this website or GitHub.

Children

GlyphLens is a general-purpose productivity tool and is not directed to children under 13. We do not knowingly collect personal information from children. Because the extension does not send data to us, we do not hold a children's data set.

Changes to this policy

We may update this policy when GlyphLens changes. The effective date at the top of this page will change, and the revision history for this public repository records each version. Continued use of GlyphLens after an update means you accept the revised policy.

Contact

For questions or privacy requests, open an issue at github.com/phk-nord/glyphlens-privacy/issues. GitHub issues are public, so please do not include sensitive personal data. If your request needs a private channel, say so in the issue and we will arrange one.

For data held by your endpoint provider, contact that provider directly. We cannot access or delete data we never received.