Privacy Policy

This Privacy Policy describes how Subtitle Translator ("Subtitle Translator", "we", "us" or "our") collects, uses, and protects information when you use our online subtitle translation service available at this website (the "Service"). The data controller is LIU Yinjiwen (sole trader), with a business address at KangHua Road 205, Pudong New District, Shanghai, China. We follow a data-minimization approach: we collect only what we need to run the Service.

By using the Service you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

1. Summary

• We do not store your subtitle files. They are processed in memory and discarded immediately after your translation is delivered.
• We collect only your account email and anonymous usage counts.
• We never sell your personal data and we do not run ad tracking.
• Payments are handled by Creem (PCI-DSS compliant); we never see or store your card details.

2. Your subtitle files are never stored

When you translate a subtitle file, its contents are processed entirely in memory to generate the translation and are not written to our servers or any database. As soon as the translated file is returned to your browser, the original and translated text are discarded. We keep no copies of your subtitle files and cannot access them after your request completes.

3. How translation works

To translate your text, the subtitle dialogue (timestamps and cue numbers are not sent) is transmitted over an encrypted connection to a third-party AI provider (OpenAI) solely to generate the translation, and only for the duration of your request. Under that provider's API terms, content submitted via the API is not used to train their models. We do not retain the text after the translation is returned to you.

4. Information we collect

• Account information. If you create an account, we store your email address (and an encrypted authentication record) to identify your account and manage sign-in.
• Usage data. We record the number of translations and the character counts associated with your account to enforce free and paid plan limits. This does not include the content of your files.
• Subscription data. If you subscribe, we store your plan status and the identifiers our payment provider gives us (customer and subscription IDs) to grant and manage your access. We do not receive or store your full payment card details.
• Technical and log data. Our servers and providers may briefly process request metadata such as IP address, timestamps, and user-agent for security, rate-limiting, anti-abuse (including Cloudflare Turnstile, where enabled), and debugging.
• Communications. If you email us, we keep your message and contact details to respond.

5. How we use information

• To provide, operate, and maintain the Service;
• To create and manage your account and authenticate sign-in;
• To enforce free and paid usage limits and process subscriptions;
• To protect the Service against abuse, fraud, and security threats;
• To respond to your requests and provide support;
• To comply with legal obligations.

6. Legal bases for processing (EEA/UK users)

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract — to provide the Service, manage your account, and process subscriptions.
• Legitimate interests — to secure the Service, prevent abuse, and operate our business, balanced against your rights.
• Legal obligation — to comply with applicable law.
• Consent — where required; you may withdraw consent at any time.

7. Sharing and service providers (sub-processors)

We do not sell your personal data. We share data only with the service providers that help us operate the Service, each only to the extent necessary:

• Vercel — website hosting and delivery.
• Supabase — account authentication and storage of email and usage counts.
• OpenAI — AI translation processing (transient; no storage of your text by us).
• Creem — payment processing and subscription billing (PCI-DSS compliant), acting as the Merchant of Record.
• Cloudflare — bot protection via Turnstile (where enabled).

These providers process data under their own privacy terms and appropriate data-processing agreements.

8. International data transfers

Our providers may process data in countries other than yours. Where personal data is transferred internationally, we rely on appropriate safeguards (such as Standard Contractual Clauses) where required by law.

9. Data retention

• Subtitle content: not retained — discarded immediately after processing.
• Account data: kept while your account is active and deleted (or anonymized) after you delete your account or upon valid request.
• Usage and subscription records: kept as long as needed to enforce limits, manage your subscription, and meet legal or accounting requirements.
• Server logs: retained only for a short period for security and debugging.

10. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your information and limit what we collect.

11. Your rights

Depending on your location, you may have the right to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw consent. EEA/UK users may also lodge a complaint with their local data protection authority. California residents have rights under the CCPA/CPRA, including the right to know and to delete; we do not sell or share personal information for cross-context behavioral advertising. To exercise any right, contact us using the details below — we may need to verify your identity.

12. Cookies

We use only strictly necessary cookies to keep you signed in and to operate core features. We do not use advertising or third-party tracking cookies, and we do not build advertising profiles. Because we use only essential cookies, no consent banner is required in most jurisdictions.

13. Children's privacy

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

14. Changes to this Policy

We may update this Policy from time to time. We will update the "Last updated" date above, and for material changes we will take reasonable steps to notify you. Your continued use of the Service after changes take effect constitutes acceptance.

15. Contact

For any privacy question or to exercise your rights, contact us at support@subtran.net.

LIU Yinjiwen · KangHua Road 205, Pudong New District, Shanghai, China