Privacy Policy

Effective date: October 15, 2026 · Applies to the TextFlip browser extension ("TextFlip", "we", "the extension").

Contact for privacy questions and data requests: textflip.app@gmail.com

The short version

What the extension processes, and where it goes

Feature / dataWhat is processedWhere it is sent
FlipThe text you select or type, converted between keyboard layouts.Nowhere. Processed locally in your browser.
Translate — "Google Translate" engineThe text you chose to translate and the target language.Sent directly from your browser to Google Translate (translate.googleapis.com).
Translate — "AI Slang Engine"The text you chose to translate, the languages, and your pseudonymous ID.Sent to the TextFlip backend (hosted on Cloudflare), which forwards the text to Google's Gemini API to obtain the translation. We do not store the text.
GrammarThe text you chose to check.Sent directly from your browser to the LanguageTool public API (api.languagetool.org).
Account / subscription statusA pseudonymous ID (see next section), trial/subscription state and dates, and — if you purchase — the order ID and license key.TextFlip backend database (Cloudflare D1).
PurchasesPayment details, billing email and receipts are handled by Lemon Squeezy, our payment processor, on its own checkout pages.Lemon Squeezy. We receive only the order ID / license key and the pseudonymous ID attached to your checkout — not your email or card details.
Settings and usage countersYour language choices, on/off toggles, sites you disabled, the number of Flips you made, and your daily free-use counters.Stored in your browser's extension storage (some settings may sync across your own browsers through your browser account). Not sent to us.

The pseudonymous ID and the "identity" permissions

To enforce the free daily limits and recognise a paid license, TextFlip uses an ID. If you are signed in to Chrome, the extension reads your Chrome profile's account identifier (the identity / identity.email permissions) locally and immediately turns it into a one-way SHA-256 hash; only that hash is sent to our backend. Your email address and account identifier are never transmitted or stored by us. If you are not signed in (or use a browser without this feature), a random ID generated on your device is used instead. The same permission is also used locally to recognise team/tester accounts. Note that a one-way hash is pseudonymous, not anonymous: someone who already knows an account's identifier could recompute its hash.

Why each permission is needed

PermissionWhy
Access to all websites (content script)So the shortcuts and pop-up work in text fields on any site. The script acts on text only when you use a shortcut, the context menu, or the optional suggestion pop-up, and skips password and payment-related fields.
activeTab, scriptingTo run the fix in the page you are using.
contextMenusThe right-click item "TextFlip: Flip Text Layout".
storageTo save your settings and usage counters.
alarmsTo refresh your subscription status periodically.
identity, identity.emailTo derive the pseudonymous ID described above (not to read or send your email).
translate.googleapis.com, api.languagetool.org, the TextFlip backendThe only servers the extension talks to (Translate, Grammar, account status and the AI translation engine).

Retention and your choices

Children

TextFlip is not directed at children under 13 and we do not knowingly collect their data.

Changes

If we change this policy we will update the date above and, for material changes, note it in the extension's store listing.