Privacy Policy

Last updated: 1 October 2026

This notice explains what happens to data when you use this service. It is short because the service does very little with your data.

What we collect

• Server logs. Request URL, timestamp, HTTP status, user agent and IP address, kept for security and to diagnose failures.
• Rate-limit counters. A short-lived per-address counter, held in memory and discarded when the window expires.
• Cached transcripts. Retrieved caption text and video metadata, held in memory and on disk cache so repeat requests do not re-query YouTube.
• Aggregate analytics. Page views and rough geography, if you have enabled an analytics provider.

We do not sell personal data. We do not ask you to create an account.

What we do not collect

• No credentials, passwords or YouTube logins — we do not ask for them and have no way to accept them.
• No uploaded files. The only input is a public YouTube URL.

How transcripts are handled

When you request a transcript, the URL you submitted is sent to YouTube to retrieve captions. If you request a translation, the transcript text is sent to the configured translation provider — by default a public Google endpoint, which may process data under Google's own terms.

Cached entries expire automatically:

• transcript text and cue timestamps — 12 hours;
• video metadata — 6 hours;
• translations — 24 hours.

Once expired the cache entry is deleted and the data is re-fetched on the next request.

Third parties

• YouTube — the embedded player and the caption source.
• Cloudflare — DNS, CDN, DDoS protection and abuse mitigation. Cloudflare may process request data under its own policies.
• Translation provider — see the privacy notice for the translation providers in use.
• 106 translation target languages are supported; the specific provider in use is configurable by the operator.

Cookies and local storage

We set no tracking cookies. Preferences such as your last-used language may be kept in your browser's local storage, which never leaves your device. If a captcha is shown to protect this service from automated abuse, the captcha provider may set its own cookies under their policies.

Your rights

Because we do not hold accounts, there is usually nothing personal to export or delete. To ask what we hold, or to have an address removed from logs, email [email protected].

Retention and security

Logs are retained for a short operational window and then deleted. The service is served over HTTPS only. Access controls follow the principle of least privilege.

Your Company Ltd., Your registered address. Registration number pending. Contact: [email protected]