Overview
Zillurl Vocab is a Chrome extension that helps users learn vocabulary from YouTube videos using AI-powered analysis. This privacy policy explains how we handle your data.
Data Collection
Data We Collect
- Video content signals: Video subtitles (or text derived from subtitles) that you choose to analyze, and limited video metadata you provide (for example: video ID, title, thumbnail URL, category, and keywords)
- User preferences: Language settings, difficulty level, and extension settings (stored locally and may be synced via Chrome)
- Saved items: Vocabulary you save, review status, and notes you create (stored locally and optionally synced to our cloud database if you sign in)
- Zillurl Account info: If you sign in, we store identifiers such as your email, display name, avatar, and product membership state for authentication and account display
- Usage and diagnostics: Basic technical data such as request timestamps and limited logs needed to operate, secure, and debug the Service
Data We Do NOT Collect
- Browsing history outside of YouTube
- YouTube account credentials
- Personal messages or private content
- Any data from websites other than YouTube
Data Storage
- User preferences are stored locally using Chrome Storage API and synced across your devices
- Subtitle analysis results may be cached on Cloudflare KV for up to 7 days to improve performance
- If you sign in, your saved words and notes can be synced to our cloud database (Cloudflare D1)
- All data is encrypted in transit using HTTPS/TLS
- Authentication uses an HTTP-only cookie that expires after a limited period (for example, up to 30 days) unless you sign out sooner
Third-Party Services
We use the following third-party services:
- Google Gemini AI: To analyze subtitles and extract vocabulary (via Cloudflare AI Gateway)
- Zillurl Account: For centralized authentication, membership, and secure browser session management
- Cloudflare Workers: To host our API service
- Cloudflare Turnstile: For bot protection during sign-in
- Stripe: If and when payments are enabled, to process subscription payments (we do not store full card details on our servers)
Data Security
- All data transmission uses HTTPS encryption
- Authentication tokens are stored in HTTP-only cookies and expire after a limited period
- We use Cloudflare Turnstile to prevent automated attacks
- Local storage is protected by Chrome's built-in security
Your Rights
You have the right to:
- Access your saved vocabulary data at any time
- Delete your account and all associated data
- Export your saved words before deleting
- Use the extension without signing in (with limited features)
- Disable or remove the extension at any time
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be reflected in the "Last updated" date at the top of this page.
Contact
If you have questions about this privacy policy, please contact us at support@zillurl.com or via the Chrome Web Store listing. You can also visit our Support page.