Privacy Policy
Last updated: 2026-10-28
1. Who we are
Bumpstudy is a browser extension plus a website that turns words and phrases you look up while reading into a personal vocabulary library, and schedules reviews for them. In this policy, “we”, “us” and “our” refer to the operator of Bumpstudy. You can reach us at yghysdr@gmail.com.
2. What we collect
- Account data — your email address, display name and profile picture URL, received from Google if you sign in with Google, or an email address and password hash if you sign up with email.
- Your vocabulary items — the text you select, the translation or explanation returned, the page URL and title where you captured it, and your review history.
- Usage data — number of AI requests per day, aggregated counters to enforce plan limits, and error diagnostics.
- Technical data — your session cookie, and standard server logs (IP address, user agent, timestamps) kept by our hosting provider for security and abuse prevention.
We do not collect the full text of pages you visit. When you use whole-page translation, we store only a reading record (URL, title, paragraph count) — not the article body.
3. Why we process it
- To provide the service: store your items, schedule reviews, sync between the extension and site.
- To generate translations and explanations you request (see section 4).
- To enforce free-plan limits and prevent abuse.
- To diagnose failures and improve quality.
- To comply with legal obligations.
Where GDPR applies, our legal bases are performance of a contract (providing the service), legitimate interests (security, abuse prevention) and consent where required.
4. Who we share it with
We use service providers that process data on our behalf:
- Hosting — Vercel Inc. (application hosting, logs).
- Database — Neon Inc. (Postgres database).
- AI model provider — the text you ask us to translate or explain, plus limited page context you choose to attach, is sent to our model provider to produce the answer.
- Google — if you choose “Sign in with Google”, Google authenticates you and shares your basic profile (email, name, picture).
- Payments — if you subscribe to a paid plan, Stripe processes payment details. We never see your card number.
We do not sell your personal data, and we do not use it for advertising.
5. Where your data is stored
Data is stored in a single region (EU or US) operated by our database provider. Some providers may process data in other countries; where required, transfers rely on Standard Contractual Clauses.
6. How long we keep it
We keep your data while your account exists. If you delete your account, we soft-delete it immediately and permanently erase it within 30 days, except where we must retain records for legal or accounting reasons. Server logs are kept by our hosting provider for a short period.
7. Your rights
- Access and export — download everything we hold about you from Settings → Export, or ask us by email.
- Deletion — request deletion in Settings or by email; we will erase your data as described above.
- Correction, restriction, objection — contact us and we will respond within 30 days.
- Complaint — you may lodge a complaint with your local data protection authority.
8. Cookies
We use one essential cookie to keep you signed in (set by our authentication library). We do not use advertising or third-party analytics cookies, so no cookie consent banner is required.
9. Children
Bumpstudy is not intended for children under 16. If you believe a child has provided us personal data, contact us and we will delete it.
10. AI-generated content
Translations and explanations are generated automatically and may contain mistakes. Do not rely on them for legal, medical or safety-critical decisions.
11. Changes
We may update this policy. Material changes will be announced on this page with a new “last updated” date; continued use after that means you accept the updated policy.