Privacy Policy

Introduction

YouPractice is a Chrome extension that enhances YouTube for language learning through structured listening and shadowing practice. This privacy policy explains how we handle your information.

Our Commitment to Privacy

YouPractice is designed with privacy as a core principle. We collect minimal data, store it locally on your device, and never sell your information to third parties.

Data Collection and Storage

What Data We Collect

YouPractice collects and stores the following data locally on your device:

1. Practice Session Statistics
   • Number of correct and incorrect answers
   • Session completion status
   • Timing information (session start/end times)
   • Video ID and title for each practice session
2. User Preferences
   • Display settings (theme, overlay position)
   • Practice difficulty levels
   • Translation language preferences
   • Audio/visual feedback preferences
3. Video Progress Tracking
   • Current segment index within a video
   • User input text during practice
   • Playback state (playing/paused)

Where Data is Stored

Data Transmission

YouPractice communicates with external services only for the following purposes:

1. YouTube Caption Extraction
   • When you start a practice session, the extension requests YouTube captions through our backend API
   • Only the video ID is transmitted (e.g., "dQw4w9WgXcQ")
   • No personal information or user data is included in these requests
   • Backend URL: https://youpractice-production.up.railway.app
2. No Analytics or Tracking
   • We do not use Google Analytics or any third-party tracking services
   • We do not collect usage statistics
   • We do not track your browsing behavior

Permissions Usage

YouPractice requests the following Chrome extension permissions. Here's why each one is needed:

Permission Limitations

• No access to other websites: YouPractice only works on YouTube.com
• No access to browsing history: We cannot see what other websites you visit
• No access to personal data: We cannot read your emails, passwords, or personal files

Your Rights and Data Control

Right to Access

You can view all your stored data at any time:

• Practice history is available in the extension popup (History tab)
• Preferences are visible in the Settings section

Right to Delete

You can delete your data at any time:

Delete All Data:

1. Right-click the YouPractice icon
2. Select "Remove from Chrome"
3. Confirm removal

Delete Specific Data:

1. Open Chrome Settings → Privacy and Security → Site Settings → Cookies and site data → See all site data and permissions
2. Search for "YouPractice"
3. Click "Remove" to delete all stored data

GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

• Consent: By installing the extension, you consent to local data storage for functionality
• Legitimate Interest: Storing preferences and progress improves your learning experience

Your GDPR Rights

1. Right to Access: View all your stored data
2. Right to Deletion: Delete all data by uninstalling the extension
3. Right to Rectification: Modify preferences in Settings
4. Right to Data Portability: Export your data
5. Right to Object: Stop data processing by uninstalling the extension
6. Right to Withdraw Consent: Uninstall the extension at any time

California Privacy Rights (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

We Do NOT:

• Sell your personal information
• Share your information with third parties for marketing
• Collect information for targeted advertising

Security

How we protect your data:

• Local Storage Security: Data is stored using Chrome's secure storage APIs and protected by Chrome's built-in encryption
• Network Security: All API requests use HTTPS encryption with API key authentication and rate limiting
• Code Security: Manifest V3 compliance, Content Security Policy, no unsafe code practices, regular security audits

Contact Us

If you have questions or concerns about this privacy policy or our data practices:

• GitHub Issues: https://github.com/banguyen93/YouPractice/issues
• Response Time: We aim to respond within 48 hours

Compliance Summary

✅ Manifest V3 Compliant - Latest Chrome extension security standards

✅ GDPR Compliant - European data protection requirements met

✅ CCPA Compliant - California consumer privacy rights respected

✅ Minimal Permissions - Only necessary permissions requested

✅ Local-First Storage - User data stays on your device

✅ No Third-Party Tracking - No analytics or advertising services

Document Version: 1.0 | Effective Date: November 3, 2025 | Last Reviewed: November 3, 2025