Subify privacy: local data, API keys and Providers

What stays in the browser

Extension settings, usage counters and the data needed for translation and dubbing are kept in local browser storage.

• •API keys are stored in browser.storage.local
• •Subtitle display settings and selected models are local
• •Temporary event logs stay in browser session storage and end when the browser closes

What can leave the device

Subtitle text or the audio a feature needs is sent to the Provider you chose, and only for the feature you use. The translated subtitle lines of each video are also sent to Subify's translation cache on sub-ify.site.

• •Text for translation goes to the translation service you selected.
• •Dubbing needs the selected service to process audio. Word meanings come from api.dictionaryapi.dev, and only the English word is sent.
• •With a Custom API, only the domain you enter is used; the browser asks permission for that one domain.

Your API key stays under your control

The current build has no developer-owned server that receives your keys. Keys stay in the extension's local settings.

• •You enter your own API key in the Provider settings
• •You are responsible for the security and use of your key
• •Each Provider has its own terms and privacy policy

Free AI and inviting friends

If you are signed in to Subify and have not saved your own AI key, subtitle translation and the chat, writing and practice features are answered with the Subify owner's key on our server.

• •Translated text is not stored on the server; the server only keeps usage counters
• •The ID of the video you translate is recorded to count your monthly free sources
• •Your invite code and who invited whom are recorded so the reward can be given
• •Dubbing and shadowing still work only with your own Gemini key

Deleting local data

In Advanced Settings you can delete all local extension data: keys, settings, counters and translation memory.

• •A full wipe cannot be undone
• •Session data ends when the browser closes
• •Translation memory for pages open now is cleared right away; for closed tabs, clearing happens on the next visit to that tab.

Analytics and tracking

The extension sends one anonymous daily report to Subify with usage totals: number of sessions, subtitle and dubbing seconds, speech seconds per source language, active hours in UTC, and the longest sitting of the day. The install ID is a random number that the server hashes. The report never includes subtitle text, video titles or URLs, API keys, account details or country.

Your IP address is not stored in Subify's database, but the hosting server's ordinary logs may record it, as with any website.

• •The Subify website has its own page-view counter. It sets no cookies and respects Do Not Track.
• •To opt out of the site's page-view counter, open any page with ?sfy_off=1. Your selected Provider also has its own data policy.

Sign-in and account data

You can sign in to Subify with a username and password, or with Google, GitHub or LinkedIn. The password is stored only as a bcrypt hash. An e-mail address is optional.

• •E-mail sign-in: the server stores the e-mail address and name for your account
• •LinkedIn sign-in: your LinkedIn ID, name, e-mail and profile picture URL are sent to the server

Account activity in the admin panel

For each signed-in member, Subify's administrator can see the number of subtitle translations, dubbing jobs, tutor practice sessions and chats this month, and the last 100 actions with their time, type of work and file or video name. This list is stored together with the member's student or Pro status.

• •Subtitle text, translations, chat messages and practice content are not stored in this list
• •This data is kept for up to 180 days and then deleted
• •The list applies only to signed-in accounts; the anonymous daily usage report is separate