Polyglot Privacy Policy / 隐私政策

Effective date / 生效日期：2026-10-22

English

What this policy covers

Polyglot is a browser extension operated by an independent developer. This policy describes the free version in which you configure your own model endpoint. It also covers the Polyglot website and support email. There is no Polyglot account, subscription, hosted translation service, or advertising in this version.

Text sent for translation

When you start page translation, the extension extracts supported visible page text. When selection translation is enabled, selecting text shows a button; clicking it or deliberately hovering over it starts translation. Selection alone does not send a request. The text, translation instructions, chosen languages, and model name are sent directly to the model endpoint you configure. An API key, if provided, is sent to that endpoint for authentication. Connection tests also contact that endpoint; the short translation test sends built-in sample text.

Page text can itself contain personal information, messages, or other sensitive material. Translate such content only with an endpoint you trust. The extension does not separately upload a browsing-history list, page title, current page address, cookies, or form input values. URLs or personal information already present in the text you choose to translate may be included in the translation request. The extension uses the active tab and page context locally to run translation and place results.

Cloud requests require HTTPS. HTTP is allowed only for loopback endpoints such as localhost, 127.0.0.1, and [::1]. A local endpoint is not a guarantee of offline processing: a local tool can forward requests to a cloud service according to its own configuration. The chosen provider and any gateway it uses determine their own retention, processing location, and model-training rules. Polyglot cannot promise that an external provider never retains text or uses it for training.

The developer does not operate a server that receives these translation requests, API keys, or translations. Translation text is not sold, used for advertising, or used by the developer to train AI models. Text is shared with the endpoint you chose only to provide the requested translation.

Local storage and deletion

Endpoint settings, model name, language preferences, and feature switches are stored in the browser's local extension storage, not browser sync storage. API keys are encrypted with AES-GCM before storage. A non-exportable encryption key is kept in the extension's IndexedDB. This protects against plaintext credentials in saved settings; it cannot protect a compromised browser, device, or browser profile.

Source text and translations are held in the current page's memory and DOM while the page is open. There is no persistent translation history or translation cache. Refreshing or closing the page removes that page's translation state; translating again makes new model requests. Cancel attempts to abort active requests but cannot undo text already received by a provider, its processing, or its charges.

You can edit settings or clear the API key and save to remove that saved credential. Uninstalling the extension removes its local extension data; close or refresh previously translated pages to remove their in-page results. For deletion of text retained by your provider, contact that provider under its own policy.

Diagnostics and limited use

The first Chrome Web Store release has no configured diagnostics receiver and sends no analytics or diagnostic reports. A disabled diagnostics option may appear in settings. This release does not create a persistent user or device tracking identifier. Store-provided aggregate installation statistics are separate from the extension's behavior.

Polyglot uses data only to provide and support its disclosed translation functionality. Its use of data received through Chrome APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. The developer does not sell user data, use it for advertising profiles, or use it for credit or lending decisions. Future cloud subscriptions or diagnostics would require an updated disclosure and any consent applicable to those features before activation.

Website and email support

When you visit the website, access information such as your IP address and the page requested is processed to display the site and help keep it secure. The website files do not include analytics scripts, advertising trackers, or account cookies.

If you contact support, we use your email address, message, and any attachments you choose to send to reply and resolve your issue. Correspondence is retained as long as needed for this purpose and periodically reviewed for deletion. You can request deletion using the contact above, subject to necessary legal retention. Please do not send API keys, passwords, or private page content.

Service providers include Cloudflare (website delivery, security, and email delivery), Google Gmail (support mailbox and correspondence storage), and Resend (outgoing support email delivery). They process the relevant access or correspondence data to provide these services under their own privacy policies.

Changes and contact

Updates will be published on this page with a new effective date. For privacy questions or support correspondence requests, contact the address above. Provider-held translation data must be addressed with the provider you selected.

简体中文

适用范围

Polyglot 由个人开发者独立运营。本政策适用于由用户自行配置模型接口的免费扩展版本，以及 Polyglot 官网和支持邮箱。当前版本没有 Polyglot 账号、会员订阅、托管翻译服务或广告。

发送用于翻译的内容

启动网页翻译时，扩展会提取受支持的可见网页正文。开启划选翻译后，选择文字会显示按钮；点击按钮或有意停留在按钮上才会发起翻译。划选动作本身不发送请求。原文、翻译指令、语言设置和模型名称会直接发送到你配置的模型接口；填写的 API Key 会发送到该接口用于身份验证。检测连接也会访问该接口；短文本测试会发送扩展内置的示例文本。

网页内容本身可能包含个人信息、通信内容或其他敏感信息，请只将此类内容发送到可信任的接口。扩展不会另外上传浏览历史列表、页面标题、当前页面地址、网页 Cookie 或表单输入值；原文本身包含的网址或个人信息可能随翻译请求发送。扩展会在本地使用当前标签页及页面上下文，以执行翻译和放置结果。

远程请求必须使用 HTTPS。HTTP 仅允许 localhost、127.0.0.1 和 [::1] 等本机回环地址。本机接口不必然等于离线处理：本地工具可能根据其配置继续向云端转发请求。模型服务商及其使用的网关如何保留数据、在哪里处理数据、是否用于训练，由其自身条款和隐私政策决定。Polyglot 无法代替第三方承诺“不保存内容”或“不用于训练”。

开发者没有接收上述翻译请求、密钥或译文的服务器，不出售翻译内容，不将其用于广告或由开发者用于 AI 训练。文字会按你的选择发送给模型接口，以提供翻译功能。

本地保存与删除

接口地址、模型名、语言偏好和功能开关保存在当前浏览器的扩展本地存储中，不使用浏览器同步存储。API Key 在保存前使用 AES-GCM 加密；不可导出的加密密钥保存在扩展自身的 IndexedDB 中。这避免设置中以明文保存凭证，但不能保护已经被入侵的浏览器、设备或浏览器配置文件。

原文和译文仅保留在当前网页的内存和 DOM 中。当前没有持久翻译历史或译文缓存。刷新或关闭页面后，页面翻译状态消失，再次翻译会重新请求模型。取消操作会尝试中止请求，但不能撤回服务商已经收到的文字、停止其已发生的处理或撤销费用。

你可以修改设置，或清空 API Key 后保存以移除该凭证。卸载扩展会删除其本地扩展数据；刷新或关闭此前翻译过的页面可移除网页内的译文。删除第三方服务商保存的内容，需要根据该服务商政策联系其处理。

诊断统计与用途限制

首个 Chrome Web Store 版本未配置诊断接收地址，不发送分析或诊断报告。设置中可能出现不可用的诊断选项。本版本不生成用于跟踪用户或设备的固定标识。商店提供的汇总安装统计与扩展自身的行为不同。

Polyglot 仅为已披露的翻译功能及其支持使用数据。通过 Chrome API 获得的数据使用遵守 Chrome Web Store 用户数据政策，包括 Limited Use 要求。开发者不出售用户数据，不将其用于广告画像、信用评估或贷款决策。后续云端订阅或诊断功能在启用前会更新披露，并在适用时取得相应同意。

官网与邮件支持

访问官网时，IP 地址、请求页面等访问信息会用于展示网站和保障访问安全。网站文件不包含分析脚本、广告跟踪器或账号 Cookie。

联系支持时，我们会使用你的邮箱地址、邮件正文及自愿发送的附件，回复请求并解决问题。支持邮件仅在有此需要期间保留，并定期检查删除。除必要的法定保留外，你可通过上述联系方式申请删除。请勿发送 API Key、密码或私人网页内容。

相关服务提供方包括 Cloudflare（网站交付、安全防护及邮件投递）、Google Gmail（支持邮箱及通信存储）和 Resend（支持邮件发送）。它们会为提供这些服务处理相应的访问或邮件信息，并适用各自的隐私政策。

变更与联系

政策更新会在此页面公布，并更新生效日期。隐私问题及支持邮件处理请求请使用上述联系方式。由模型服务商保存的翻译数据，需联系你选择的服务商处理。