Legal

Privacy Policy

Last updated: October 17, 2026

Lenton ("Lenton", "we", "us") is operated by Sahand Khademi as an individual. This policy explains what personal data Lenton collects, why, and what control you have over it. Contact privacy@withlenton.com for anything about your data or this policy.

What we collect

Creating an account requires an email address, a display name, and a password. Signing in is handled by Clerk (see below), so Lenton itself never sees or stores your password. Using Lenton also creates learning data tied to your account: saved vocabulary, watch and reading history, and preferences you set.

Lenton also counts how much of each AI feature your account uses per day — minutes of subtitles made, paragraphs read aloud, word audio played — so it can keep a fair daily allowance. These are counts only, never the words or videos themselves, and they are kept for 90 days.

We do not run analytics, advertising, or tracking scripts of any kind. We do not know how you use the app beyond what's necessary to run it — there is no third-party tracker on this site.

Why we collect it

• To create and secure your account (email, and the sign-in details Clerk holds for you).
• To provide the features you use — vocabulary lookup, reading, and watch history are the product itself, not a byproduct.
• To send account-related email only (verifying an address, a password reset, an invitation to join) — never marketing. Clerk sends these on Lenton's behalf.

Who else sees it

Your learning data is stored in a private, per-account database — other accounts on Lenton cannot see it, including other members of the same Lenton deployment. Sign-in relies on Clerk, which does know who you are. Other features call external services to do their job, using only what's needed for that request (not your account identity), as listed below:

• Clerk (Clerk, Inc.) — the sign-in service. Clerk holds your email address, display name, and password (as a salted hash), and records your sign-ins and the devices you sign in from. It is the one service that knows who you are. Clerk is based in the United States and processes this data under its data processing agreement with us; see Clerk's privacy policy at clerk.com/legal/privacy. Your learning data (vocabulary, history, preferences) is never sent to Clerk.
• Groq (Groq, Inc., United States) — speech-to-text, only when a YouTube video has no captions and Lenton makes its own. The soundtrack of that public video is sent to Groq to be transcribed. Nothing about you goes with it, and Lenton never records or uploads your own voice.
• Sentry (Functional Software, Inc., United States) — error reports, stored in Sentry's EU region in Germany. When something breaks on the server, Sentry receives the technical details of the error and an internal account number that means nothing outside Lenton. It never receives your name, email address, or what you were reading or writing.
• Wiktionary/Wikipedia — word definitions.
• Google Gemini / ElevenLabs — only where AI-assisted translation or pronunciation audio is used, sending the text needed for that one request.

We never sell your data, and never share it for advertising purposes.

The Chrome extension

The Lenton extension works on Disney+, Max and YouTube, and on any other website only after you switch it on for that site. There it reads the subtitles and the text on the page so it can make the words clickable. That reading happens in your browser. Only what a feature needs is sent to Lenton: the word you hover or click and the sentence around it, a word you save, and the address of a YouTube video you ask Lenton to make subtitles for. Lenton handles these exactly like the same actions on the website.

The extension does not record your browsing history, the pages you visit or what you watch. On a site you have not switched on, nothing is sent unless you open Lenton's quick dictionary there yourself and look something up. Its settings, the list of sites you switched on, subtitle files you import, and the code that keeps it signed in to your account are stored in your own browser and are removed when you uninstall it. Lenton's use of information it receives through the extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements: it is used only to provide Lenton's features, is never sold, and is never used for advertising or to judge creditworthiness.

How long we keep it

We keep your account and learning data for as long as your account exists. You can export a full copy of your data at any time from Settings, and request account deletion by contacting us — deletion removes your account's data from active storage and deletes your sign-in record at Clerk. Backups made before a deletion request may persist for a limited period before being cleared in the ordinary backup rotation.

Your rights

If you're in the EU/EEA or UK, you have rights under the GDPR (and equivalent protections elsewhere), including the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us at the address above to exercise any of these — we'll respond as quickly as we can.

Where data is stored

Lenton's servers run on Railway in Amsterdam, and your account and learning data are stored in a Neon database in Frankfurt, so your Lenton data stays within the EU. Cloudflare sits in front of the site to deliver it securely. The exceptions are sign-in, where your details at Clerk are held in the United States, and transcription, where a video's soundtrack is processed by Groq in the United States. If you're in the EU/EEA, that means those pieces of data are transferred outside it. We take reasonable care to use providers with appropriate safeguards.

Changes to this policy

If this policy changes in a way that matters, we'll update the date above and, where required, let you know directly.