Lyner Privacy Policy
Effective August 21, 2026

Lyner uses only the information necessary to find, synchronize, translate, and romanize lyrics for the YouTube video the user is watching.

Information Lyner handles

Lyner reads the current video title, artist or channel, duration, playback position, and video identifier. This information is used to identify the song, retrieve suitable lyrics, synchronize them with playback, and remember user-selected timing or metadata corrections.

When the user explicitly requests translation or romanization, Lyner processes the lyrics, song title, artist, and requested operation.

Users may optionally provide an email address to request enhanced access. Lyner then processes the email address, a random installation identifier, browser label, approval status, and an opaque authentication token.

For security and rate limiting, Lyner records the requested transformation type and time. The server stores HMAC-hashed IP fingerprints, rather than raw IP addresses, to detect account sharing and enforce a five-IP limit.

Data transmission and service providers

Track information is transmitted securely over HTTPS to LRCLIB, lyrics.ovh, and Genius as necessary to locate lyrics or an existing translation or romanization.

Optional account and transformation requests are transmitted over HTTPS to Lyner’s API hosted by Vercel. Account data is stored using Neon Postgres. Approved transformation requests are processed through OpenAI’s API. These providers may receive standard network information under their respective privacy policies.

Lyner does not sell personal information, use it for advertising, or transfer it for purposes unrelated to its lyrics functionality, security, or legal obligations.

Local storage and retention

Lyner stores preferences, timing corrections, song corrections, cached lyrics, cached transformations, email access state, and the opaque authentication token locally in the browser.

The Lyner service retains account, session, rate-limit, and hashed IP-fingerprint records while the account remains in use or as reasonably necessary for security and abuse prevention. Raw authentication tokens are not stored in the server database. Lyrics are not intentionally retained in Lyner’s database.

User choices

Translation and romanization occur only when requested by the user. Providing an email address is optional. Users can sign out through Lyner settings, uninstall the extension to remove locally stored information, or request access to or deletion of server-side account information through the support contact on Lyner’s listing.

Security

Lyner uses HTTPS, server-held credentials, hashed authentication tokens, short-lived administrative sessions, rate limits, and hashed IP fingerprints. No security measure is perfect, but access is limited to what is necessary to operate and secure Lyner.

Limited use

Information received through browser APIs is used only to provide and improve Lyner’s single-purpose lyrics functionality, maintain security, and comply with applicable law. It is not used for personalized advertising, credit decisions, or unrelated human review.

Contact and updates

This policy may be updated when Lyner’s functionality or legal obligations change. Material changes will be reflected in the extension-store disclosures and the public policy.

Privacy questions and deletion requests may be sent to:

qmssnspm@gmail.com

The current public version of this policy is available at:
https://lyner-access-server.vercel.app/privacy/