Privacy Policy

01Who handles your data

The product operator identified below is responsible for the site, extension and account data. If Waffo acts as Merchant of Record for an eligible transaction, it is the seller to the buyer for that sale.

Product operator: To be published before launch · Privacy email: To be published before launch

02Data we process and why

The extension reads video frames locally and stores caption preferences, rules, and the free allowance. If you choose email sign-in, the account service processes your email and session; if you buy Pro, it separately processes order and license records.

Uninstall feedback is optional and does not require sign-in. We keep the selected reason, optional comments, page language and extension version for 90 days before cleanup. Do not include email addresses, order numbers or other personal information. Comments are not sent to Google Analytics. Feedback is not linked to an account and raw IP addresses are not stored. We use short-lived hashed identifiers to limit abuse.

When you connect an account or start a purchase in the extension, a locally generated random installation identifier is sent to the licensing/checkout service to associate device connections and orders. It is not a login credential. This differs from the separate diagnostic installation identifier used only when you upload a report.

Extension diagnostic logs include relevant video IDs, cleaned public links, action times, detection and access states, and build information by default. They stay locally for up to 3 days, 5,000 events or 5 MiB. Only clicking Upload sends this report to subtitle.im servers hosted by Cloudflare for troubleshooting; no email or Pro is required. Logs exclude email addresses, login credentials, subtitle text and video frames. The server uses a hashed anonymous installation identifier to limit uploads and returns a report ID. Reports expire after 30 days and are cleared by a scheduled task. Keep the report ID for support queries or deletion requests. Reports also include an anonymous installation identifier, device connection and Pro status, plus system, browser version, languages, time zone, CPU cores, memory tier and display configuration. Unavailable details are marked unknown.

For account security and connection troubleshooting, we record the time, IP address, country or region estimated from the IP, and event type when you successfully register, sign in or connect the extension. When you visit pages on this site, we also record the page category, language and visit IP. After account verification, we can link visits from the same tab within the preceding 30 minutes. Activity records stay in the live database for 30 days and are removed by a daily job. Encrypted backups rotate as described below.

Only with your consent, we use Google Analytics 4 to measure all page visits, installation clicks, and the stages and outcomes of sign-in and purchase flows. Google may process IP addresses, browser and device information, and analytics cookies. We do not send email addresses, login tokens, order IDs, video frames, subtitles or viewing history. Page addresses contain route templates only, without queries, fragments or dynamic identifiers. Channel labels are stored in the current tab and expire after 30 minutes of inactivity to connect sign-in and checkout statistics. Ads personalization and Google Signals are disabled. Your choice and analytics cookies last up to 180 days; event data is retained for 2 months. You can decline or withdraw consent through Privacy settings in the footer. Withdrawal stops future analytics and removes this site’s Google analytics cookies, without affecting prior lawful processing. Google may process this information in other countries or regions. With analytics consent, we also store the first known channel, campaign and post labels locally for up to 30 days, without full referrer URLs. At first registration we attach them to your account and count channel Pro claims and extension connections by account. This link stays in our database; account identifiers are not sent to Google. It is kept with the account and can be deleted on request. Declining prevents storage and submission of optional entry labels. Withdrawal clears local labels and stops future collection; you can request deletion of existing account records. Historical sources may also be inferred from existing successful campaign-claim business records, with the evidence marked; this does not recover a first visit or a missing post. With your analytics consent, we also use self-hosted Umami to count pageviews. Umami does not set analytics cookies. We record page route templates and referring sites without query parameters or fragments. Google

03Legal basis and necessity

Where applicable law requires a legal basis, local free allowance records are used to provide the free features you request. If you choose email sign-in, email verification and session records support account connection. If you buy Pro, order and license records support paid access. Necessary security logs help prevent abuse and protect the service; legally required transaction records help us meet legal obligations. Free use does not require an email address. If we later offer optional marketing or other processing that requires consent, we will explain it separately and obtain any required consent first.

04Local storage and cookies

The extension stores caption preferences, rules, and the free allowance locally; clearing its data may reset the allowance. If you choose to connect an account, it also stores a device session token.

When only reading, copying or downloading a transcript: The extension gets captions from YouTube without uploading transcripts or video frames to subtitle.im. Text and reading state are cached locally, limited to 8 videos/4 MiB. Cache entries expire after 24 hours and are removed on later cache operations; reloading invalidates the old page state. PDF layout snapshots use browser session storage, expire after 1 hour and are cleaned up when the layout tab closes, a new layout is created or the background starts. You manage downloaded files. When using the AI assistant, the relevant captions, question and conversation context you submit go to subtitle.im and then the configured model provider; video frames are not sent. Temporary chats are accessible for 24 hours and physically deleted within about 48 hours when scheduled cleanup runs normally. The credits ledger is retained separately. Explicitly saved answers remain until you delete them. Model providers process and retain data under their own policies.

Your manually selected website language is saved in a cookie on this site for about one year. Only the root homepage uses this preference, then the languages in your browser request, and finally English. Simplified and Traditional Chinese are matched separately. We do not choose a language by IP address or save an automatic match as a manual preference. You can change the language or clear this cookie at any time.

05Payments and Waffo

Purchases use Waffo Pancake hosted checkout. Creating checkout sends your account ID, email, plan and order identifiers. Waffo and its payment partners handle card details; subtitle.im does not collect full card numbers or security codes. Transaction results update orders and Pro access. The checkout and receipt identify the seller, taxes, receipts, renewal, cancellation and refund terms.

06Providers and transfers

Cloudflare hosts the site, API and database. Resend delivers email codes and transactional mail. Clerk and your chosen Google or GitHub provider handle social sign-in. Waffo Pancake provides hosted checkout. Providers receive information needed for their roles and may process it outside your region. We do not sell personal information or share account data with unrelated parties.

If you choose quick sign-in, Clerk and your selected sign-in provider process your email, profile and sign-in session. We use your Clerk user ID and verified email to connect your site account and Pro access. We do not send video frames, subtitle text or card details to the sign-in service. Necessary sign-in cookies maintain your session. Clerk

Cloudflare · Resend · Waffo

07Retention and security

Email codes last 10 minutes, connection requests 15 minutes, and website/device sessions up to 90 days. The daily cleanup deletes code, request and session records 30 days after expiry; expiry is not immediate deletion. Account, order, payment and audit records may remain for recovery, disputes, security or legal obligations. A uniform retention period for these business records is not yet defined; contact support with questions or data requests.

Database backups are encrypted on an independent NAS. We retain daily snapshots from the last 35 days, plus one snapshot for each of the latest 12 weeks and 12 months with backups. Older copies outside these rules are removed only after a new backup succeeds. Deletion requests may need to wait for these copies to expire; approved deletions are reapplied after a restore.

08Your choices and requests

The free allowance needs no email; clearing extension data may reset local records. You can sign out and request access, correction, export or deletion of account data through the email on this page. We verify identity. Order, dispute or security records may be retained by law, and deletion may prevent Pro recovery. Contact the checkout seller for card, tax, receipt or refund data collected by the payment platform.

Depending on applicable law and the basis for processing, you may also have rights to withdraw consent, restrict or object to processing, receive portable data and complain to a supervisory authority. Withdrawal does not affect earlier lawful processing. We will verify your identity and explain any records we must retain by law.

FAQs

09Children

The product is not specifically intended for minors. They should use it with guardian consent and guidance. Report data we should not hold through the published privacy contact.

10Policy changes

We show the update date here. We will revise this policy before enabling new payment or email services, changing data uses or making other material changes, and notify users on the site or by email where appropriate.

Terms of Service