Contact
Brandon Agil
Epplestraße 5
70597 Stuttgart
Deutschland
support@getlegenda.de
Visiting this website
The website is hosted by Hostinger. The hosting account lists France as the location of this website’s server and Lithuania as the location of its website backups. These locations describe website hosting, not the separate AI services described below. Loading a page sends connection information, including your IP address and the requested URL, to the hosting infrastructure so it can deliver the site. Hosting infrastructure may process technical logs to operate and secure the service. See Hostinger’s Privacy Policy for its data-handling information. Hostinger also publishes a Data Processing Addendum covering services such as hosting and email.
This website does not add analytics, advertising trackers, visitor accounts or tracking cookies. Fonts, images and scripts are served with the website. The interactive examples run in your browser and do not send your clicks or the example text to an AI service.
Beta signup and optional newsletter
Submitting the beta form asks Legenda to email you about beta invitations and availability. The separate, unchecked newsletter option is for product news and offers. Both rely on your consent under Article 6(1)(a) GDPR. Joining the beta list does not require newsletter consent. The signup is voluntary and does not purchase a licence.
We send a confirmation email. Your signup becomes active only when you open its link and confirm on the page. We store your email address, chosen language and email purposes, request and confirmation times, and the wording and version of your consent. Security tokens protect confirmation and unsubscribe links. The signup list does not contain your name or a plaintext IP address. It is stored outside the public website directory on the existing Hostinger hosting account. Hostinger processes the hosting and email delivery; your email provider receives the message for delivery to your inbox. No separate newsletter platform or AI service receives the signup list.
Confirmation links expire after 48 hours. Expired, unconfirmed entries are removed the next time a signup or link request processes the list, or during maintenance. The expiry time is not a guaranteed deletion deadline. Confirmed entries are retained until you unsubscribe or the relevant purpose ends. When beta invitations finish, beta-only entries are removed; a separately confirmed newsletter subscription can continue. Hosting backups may retain earlier copies until the host rotates them; a restored list must be checked against withdrawals before any messages are sent.
The confirmation email and every subsequent signup or newsletter email include a link to manage your subscription. You can withdraw newsletter consent separately or unsubscribe from all signup emails, without logging in. Full withdrawal removes your address from the live signup list. You can also contact support@getlegenda.de. Withdrawal does not affect the lawfulness of earlier processing. We do not use opening pixels or personalised click tracking. Temporary spam counters use a keyed IP hash, with the same ten-minute window and request-triggered cleanup described for the support form below. Abuse prevention relies on Article 6(1)(f) GDPR.
Support requests
The contact form sends your email address, message and optional name to the Legenda support mailbox at Hostinger. We use these details to answer your request. For questions about an agreement or access you have requested, the legal basis is Article 6(1)(b) GDPR. For other enquiries, it is our legitimate interest in responding to you under Article 6(1)(f) GDPR.
Messages remain in the support mailbox while the enquiry is being handled and for any retention period required by law. The form does not keep a separate copy of your message on the web server. Temporary request counters help prevent spam; they contain a keyed hash derived from your IP address, not the message or your email address. The per-IP counter has a ten-minute counting window. Expired per-IP entries are removed when a later valid form submission processes the counter file; the counting window is not a guaranteed deletion deadline. The form does not set cookies or send your message to an AI service.
Settings and data in your browser
The extension stores preferences such as translation language, subtitle appearance and enabled learning tools in your browser profile. Some preferences use browser sync and may be synced across your devices by your browser account. Licence credentials, cached translations and learning history are stored locally by the extension. Local storage and browser sync are different from storage on Legenda’s server.
The local lookup history keeps the newest 2,000 entries. An entry can contain the word, sentence context, learning language, source page or video title, a video ID where available and the time of the lookup. This supports the recent and frequent words shown in the extension popup. It is not a record of every page you visit. Entries have no automatic time-based expiry; older entries are replaced when the limit is reached. The vocabulary cache holds up to 20 entries with generated vocabulary, video title, video ID, transcript and language settings; older entries are replaced when that limit is exceeded. These records remain local to the extension until replaced or its local data is removed. Translation and explanation caches also use temporary browser memory.
Subtitles and translations
Legenda reads available captions for the video you are watching. Depending on the translation mode, subtitle text is processed through YouTube’s caption translation, Google Translate or the Legenda service. The purpose is to show the translated subtitles. Google handles its services under Google’s Privacy Policy.
AI explanations, vocabulary and chat
When you use the Legenda service, relevant subtitle sentences, selected words, your questions and video context are sent to a Cloudflare Worker operated for Legenda. Chat and vocabulary features can include a video title and its available transcript. The worker sends the request to Scaleway’s Generative APIs, which run the DeepSeek model in Paris, France. Requests through this service are not sent to DeepSeek’s own API.
The application code does not save subtitle, transcript or chat content in its server database. Scaleway does not use inputs or outputs to train models or share them with the model creator. Its default is no retention of request content. For requests causing abnormal errors or suspected harmful activity, Scaleway may retain the full HTTP request for up to two weeks to investigate the issue. Aggregated, anonymised usage data can be kept for up to six months. See Scaleway’s Generative APIs privacy information and Data Processing Agreement.
Cloudflare processes requests and connection information to deliver and protect the Legenda service. Its infrastructure and subprocessors may process data outside the EEA. Cloudflare’s Data Processing Addendum provides standard contractual clauses and safeguards for applicable international transfers. The Paris location of the AI model does not mean all Legenda infrastructure processes data only in the EU. Avoid including sensitive personal information in your requests.
Licence checks and usage limits
When you activate a licence, the service processes your licence key and an installation name. For a Lemon Squeezy licence, it sends the information needed to activate or validate it to Lemon Squeezy. Licence-cache entries contain a hash combining the licence key and installation ID, the licence status and expiry, and a check timestamp. Each entry expires one hour after it is written; a later licence check may create a new entry. Daily usage counters are associated with a separate hash of the licence key and expire 48 hours after their last update. These entries support access checks and usage limits. These time limits apply to these Worker database entries, not to logs or records held by external providers.
Some private-beta keys are validated directly by the Legenda service. If a purchase is processed by Lemon Squeezy, the checkout and its payment data are handled by that provider under its Privacy Policy. The extension does not receive payment-card details.
Optional features
Word lookup on other pages processes the text selected for a lookup and the context needed for the explanation. Anki export sends the words and cards you choose to AnkiConnect on your own computer. Using an external AI service to prepare translations or card content involves the processing described above; delivery to AnkiConnect is local.
A development or advanced-use edition may allow your own provider key. In that edition, the configured provider receives the request and its own privacy policy applies. Keys are stored locally and sent to the selected provider to authenticate requests.
How Legenda uses your data
Legenda processes extension data to provide subtitles, word explanations, vocabulary tools, chat and related access checks. Legenda does not sell user data or use it for personalised advertising. The sections above describe which external services receive data when you use these features.
Legenda’s use and transfer of user data received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used to provide the user-facing features described here, not to build advertising profiles.
Legal bases and required information
Where processing personal data is necessary to deliver the extension features and licence access you request under our agreement, we rely on Article 6(1)(b) GDPR. Website delivery, service security and abuse prevention rely on our legitimate interests in operating a reliable service under Article 6(1)(f) GDPR. The legal bases for support enquiries are described above. Information required for a feature must be provided to use that feature; you are not legally obliged to use Legenda or submit a request.
Control and requests
You can turn the extension off, disable optional tools and clear extension data through your browser settings. Browser-synced preferences are managed through your browser account. Removing data from the browser does not remove data held by an external provider.
To ask about access, correction, deletion or other data rights that apply to you, contact support@getlegenda.de. Explain your request without sending credentials. We may need enough information to identify the relevant record. You may also contact the data-protection authority responsible for your location.
Subject to the applicable conditions, you can request access, correction, deletion, restriction of processing and data portability. You can object to processing based on legitimate interests because of your particular situation. If we rely on consent for a specific activity, you can withdraw it for future processing. You may complain to a supervisory authority, including in your place of habitual residence or work.
Changes
This page will be updated when the way Legenda processes data changes. The date above identifies this version.