What we collect, and what we do not.

Who we are

Subtitling.net is a service of TranscripTech, Unipessoal LDA, registered in Portugal. We are the controller of the personal data described on this page.

For anything on this page, including access and deletion requests, write to privacy@subtitling.net.

What we do not do

This site sets no cookies. Not for analytics, not for advertising, not for preferences.

The only thing stored in your browser is your sign-in token, kept in local storage so you stay signed in between visits. It is not sent to anyone else, and signing out removes it.

We do not sell personal data, we do not share it for advertising, and we do not track you across other websites.

The files you upload

To generate subtitles we have to process the file you give us. It is stored, the speech in it is converted to text, and that text is then prepared for use as subtitles. If you ask for a translation, the subtitle text is translated.

Some of that work is carried out for us by specialist providers, under contract. Some of it takes place outside the European Economic Area.

What each of those providers does, what it receives and where it is, is set out on our sub-processors page.

How long we keep your files

Your uploaded video, and the subtitles and transcripts made from it, stay available until you delete them from your My Videos page or ask us to close your account. That is so you can come back and download or edit your work.

When you delete a video, it is gone for good. The video, the subtitles and any burned-in copy are removed from our storage straight away. Nothing is kept in reserve, so we cannot bring them back either.

On some accounts the source video is deleted automatically 24 hours after the subtitles are ready.

Closing your account removes your media, your subtitles and your account record.

Your account

When you register we store your email address, a hashed version of your password, and your credit balance and its history. If you sign in with Google, we receive your email address and name from Google, and nothing else.

Payments are handled by an external payment provider. Card details go straight to them and never reach our servers; we keep a reference to the transaction so we can show you your purchase history.

We send you transactional email, such as password resets and address confirmations, through an email delivery service.

How we measure use of the site

We want to know where the site works and where it does not: which pages people read, and where they stop. We do this in a way that does not identify you.

We do not use cookies for this, and we store nothing on your device. Our server works from a short code that cannot be linked back to you after two days, by anyone, including us. Your visits on different days are not connected to each other, and we cannot recognise you on any other website.

We record which pages are opened and which features are used. We never record the name or the content of your files.

When another site links you here, we record the address of that site and nothing further, for example google.com. We do not record the full link, so anything you typed into a search stays out of it.

If you later sign in, the record of your visit before signing in is not connected to your account.

If your browser sends a Global Privacy Control signal, we record nothing at all.

Our basis for this is our legitimate interest in understanding and improving our own service.

Visitor statistics

We use an external analytics service for overall visitor numbers. It sets no cookies and stores nothing on your device; visits are counted from your IP address and browser type, which it hashes and discards. We see totals per page, not individuals.

Our content delivery network also keeps an ordinary server log of which pages were requested, deliberately configured without the visitor IP address, so it records what was asked for and not who asked. Those logs are deleted after 30 days.

The sign-up form uses an external check to tell people from automated scripts. It sets no cookie.

How long we keep measurement data

Records of use that are linked to your account are kept for 90 days. Records that are not linked to an account are kept for 12 months, and cannot be traced back to a person.

Everyone who processes your data

Our sub-processors page lists every provider involved and what each one receives. It also says how to ask us which supplier handles a particular step.

Where your data is, and when it leaves the EEA

Your account, your uploaded media and your generated subtitles are stored in the European Union, in Paris.

Two steps of subtitle generation take place outside the European Economic Area, in the United States: converting speech to text, and processing the subtitle text. Everything else stays in the European Union.

Those transfers rely on the standard contractual clauses adopted by the European Commission. Write to privacy@subtitling.net for a copy.

Why we are allowed to do this

Processing the files you upload, running your account and taking payment are necessary to provide the service you asked for. The lawful basis is performance of a contract.

Measuring how the site is used, and protecting the sign-up form from automated abuse, rest on our legitimate interest in running and improving our own service.

Where we ask for your consent, for example to send you something that is not about your account, you can withdraw it at any time.

Your rights

You can ask us for a copy of the personal data we hold about you, to correct it, to delete it, to receive it in a portable form, or to restrict what we do with it. You can also object to the processing we base on legitimate interest, including the measurement described above.

Write to privacy@subtitling.net. We answer within one month.

If you are not satisfied with our answer, you can complain to your national data protection authority. In Portugal, where we are established, that is the Comissão Nacional de Proteção de Dados.

Children

This service is not directed at children under 16, and we do not knowingly collect their personal data.