Privacy Policy

This policy applies to the Hanko browser extension (Chrome and Firefox) and the Hanko web app at hanko-amber.vercel.app. They share a single account and a single database.

Only two kinds of data: what is needed to sign you in, and what you deliberately save.

Account information

Your email address, display name, and profile picture URL, received from Google when you sign in. Used to identify your account and nothing else.

Vocabulary you save

The word you selected, its reading, its English meaning, its Mongolian translation, and the deck and folder names you create. A word is only ever saved when you explicitly trigger a save.

Review history

For each card you review: the rating you gave, how long you took to answer, and when. This is what produces your scheduling, streaks, and statistics — the app cannot function without it.

Audio files

If you generate pronunciation audio for a word, the resulting file is stored in your own private folder and is readable only by your account.

Local extension storage

The extension keeps a copy of your decks and words on your own device so it works offline, along with your sign-in token so you stay logged in. This never leaves your browser except to sync with your own account.

• Your browsing history, or the addresses of pages you visit.
• Page content, beyond the text you yourself select and choose to save.
• Your location, IP-derived or otherwise, beyond the transient logs kept by our hosting providers.
• Passwords or credentials. Sign-in is handled entirely by Google; Hanko never sees your password.
• Payment information. Hanko is free and takes no payments.

The extension’s content script runs on every site because Japanese text can appear on any site. It reads only your current text selection, and only at the moment you trigger a save with the right-click menu or the keyboard shortcut. It is idle otherwise.

Context menus

Adds the single right-click entry that saves a selected word.

Storage

Keeps your decks on your device so the extension opens instantly and works offline.

Active tab

Reads your selection when you press the save shortcut, for that tab only, at that moment only.

Alarms

Runs a background sync every five minutes so your words reach your other devices.

Notifications

Confirms that a word was saved, since saving usually happens with no window open.

Site access

Lets you capture a word on whichever page you are reading.

Hanko sends data to four services, each for one purpose. None of them receive your data for their own advertising or profiling.

Supabase

Hosts the database, authentication, and audio storage. This is where your account and your words live.

Vercel

Hosts the web app and its API endpoints.

Google

Provides sign-in. Separately, the word being defined is sent to Google Translate to produce the Mongolian meaning. Only the word itself is sent — never your identity.

Jisho.org

Looked up to find a word's reading and English meaning. Only the word you selected is sent, with no account information attached.

Every table is protected by PostgreSQL row-level security, scoped to your user ID. This is enforced by the database itself, not by the app: a request carrying your token can read your rows and no one else’s, even if a client is modified. Audio files are held in a private bucket under a path keyed to your user ID. All traffic is over HTTPS.

No engineer routinely browses user data, and no data is shared with, sold to, or licensed to any third party for any purpose.

Your data is kept for as long as your account exists, because a spaced-repetition system is only useful with its history intact.

You can delete individual words and whole decks at any time from the web app or the extension. To delete your account and everything in it, email bilguuntushig.a@gmail.comfrom the address you signed up with. Deletion removes your profile, decks, words, review history, and audio files, and it cannot be undone. Clearing the extension’s local data is done by removing the extension from your browser.

Hanko is not directed at children under 13 and does not knowingly collect their data.

If this policy changes materially, the date at the top of this page will change and the new version will be published here before it takes effect.

Questions about this policy, or requests concerning your data: bilguuntushig.a@gmail.com.