What we collect, and what we do not.

Who we are

Subtitling.net is a service of TranscripTech, Unipessoal LDA, registered in Portugal. We are the controller of the personal data described on this page.

For anything on this page, including access and deletion requests, write to privacy@subtitling.net.

What we do not do

This site sets no cookies. Not for analytics, not for advertising, not for preferences.

The only thing stored in your browser is your sign-in token, kept in local storage so you stay signed in between visits. It is not sent to anyone else, and signing out removes it.

We do not sell personal data, we do not share it for advertising, and we do not track you across other websites.

The files you upload

To generate subtitles we have to process the video you give us. That means the file is stored, its audio is transcribed, and the resulting text is worked on.

Parts of that work are done by specialist providers, and it is only fair that you know which:

Speech to text

The audio of your video is sent to ElevenLabs, in the United States, to be transcribed.

Subtitle text

The transcribed text is sent to OpenAI, in the United States, for the steps that remove filler words and adjust reading speed.

Translation

When you ask for a translation, the subtitle text is sent to DeepL, in the European Union.

How long we keep your files

Your uploaded video, and the subtitles and transcripts made from it, stay available until you delete them from your My Videos page or ask us to close your account. That is so you can come back and download or edit your work.

If your account is set up for subtitle files only, the source video is deleted automatically 24 hours after the subtitles are ready.

Closing your account removes your media, your subtitles and your account record.

Your account

When you register we store your email address, a hashed version of your password, and your credit balance and its history. If you sign in with Google, we receive your email address and name from Google, and nothing else.

Payments are handled by Stripe. Card details go straight to Stripe and never reach our servers; we keep a reference to the transaction so we can show you your purchase history.

We send you transactional email, such as password resets and address confirmations, through Amazon SES.

How we measure use of the site

We want to know where the site works and where it does not: which pages people read, where they stop, and which files our tools turn away. We do this in a way that does not identify you.

We do not use cookies for this, and we store nothing on your device. Instead, our server derives a short code from your IP address and browser type using a secret key that changes every day and is deleted after two days. Once that key is deleted, those codes cannot be linked back to any IP address by anyone, including us. Your visits on different days are not connected to each other, and we cannot recognise you on any other website.

We record which pages are opened, which buttons are used, and whether a file we were given could be read. We never record the name or the content of your files.

The subtitle editor at /srt-editor is excluded from this entirely, including as the previous page of another visit.

If your browser sends a Global Privacy Control signal, we record nothing at all.

Our basis for this is our legitimate interest in understanding and improving our own service.

Visitor statistics

We use Cloudflare Web Analytics for overall visitor numbers. It sets no cookies and stores nothing on your device; visits are counted from your IP address and browser type, which Cloudflare hashes and discards. We see totals per page, not individuals.

Our content delivery network also keeps an ordinary server log of which pages were requested, deliberately configured without the visitor IP address, so it records what was asked for and not who asked. Those logs are deleted after 30 days.

The sign-up form uses Cloudflare Turnstile to tell people from automated scripts. It sets no cookie.

How long we keep measurement data

The daily key described above is deleted after two days.

Records of use that are linked to your account are kept for 90 days. Records that are not linked to an account are kept for 12 months.

That is the opposite of what people usually expect, and it is deliberate. The records attached to you are the ones that can identify you, so they are the ones we keep for the shortest time. The anonymous records cannot be traced back to a person once the daily key is gone, and keeping them longer is what makes them useful.

Everyone who processes your data

Amazon Web Services

Storage, database, compute and outbound email, all in the Paris (eu-west-3) region.

ElevenLabs (United States)

Speech to text: the audio of the videos you upload.

OpenAI (United States)

Subtitle text, for the filler-word and reading-speed steps.

DeepL (European Union)

Subtitle text, when you ask for a translation.

Stripe

Payments. Card details never reach us.

Google

Email address and name, only if you sign in with Google.

Cloudflare

Visitor statistics, and the check on the sign-up form.

ImprovMX

Forwarding email sent to our @subtitling.net addresses.

tawk.to

Our help centre and support chat.

Where your data is, and when it leaves the EEA

Your account, your uploaded media and your generated subtitles are stored on Amazon Web Services in Paris.

Two steps of subtitle generation send data outside the European Economic Area: the audio goes to ElevenLabs and the subtitle text goes to OpenAI, both in the United States. Those transfers rely on the European Commission’s standard contractual clauses.

Why we are allowed to do this

Processing the files you upload, running your account and taking payment are necessary to provide the service you asked for. The lawful basis is performance of a contract.

Measuring how the site is used, and protecting the sign-up form from automated abuse, rest on our legitimate interest in running and improving our own service.

Where we ask for your consent, for example to send you something that is not about your account, you can withdraw it at any time.

Your rights

You can ask us for a copy of the personal data we hold about you, to correct it, to delete it, to receive it in a portable form, or to restrict what we do with it. You can also object to the processing we base on legitimate interest, including the measurement described above.

Write to privacy@subtitling.net. We answer within one month.

If you are not satisfied with our answer, you can complain to your national data protection authority. In Portugal, where we are established, that is the Comissão Nacional de Proteção de Dados.

Children

This service is not directed at children under 16, and we do not knowingly collect their personal data.