Privacy Policy

1. What we process

When you use UrlToSub, the following happens:

• Your video or audio file is loaded in your browser memory only — it never leaves your device.
• FFmpeg (running in your browser via WebAssembly) extracts the audio track locally.
• The extracted audio is sent to OpenAI Whisper API for transcription. AssemblyAI may be used as a fallback. Both providers process and delete the audio immediately after transcription.
• The resulting subtitle text is sent to Anthropic Claude API for translation. If you use creator tools (Launch Kit, Newsletter, Hook Generator, etc.), the transcript text is also sent to Claude for generation. We do not store any of this text.
• The final subtitle or transcript file is generated in your browser and downloaded to your device.

Saved projects (.urltosub files) are stored entirely on your own device. We never receive or store your subtitle content.

Bug reports and feedback submitted via the site contain only the description, page URL, and browser info you voluntarily provide. These are sent to our email address via Gmail.

2. What we collect for free tier enforcement

To enforce fair usage limits on the free tier, we temporarily store two items in our database (Upstash Redis):

• Your IP address — stored as a hashed key to track free tier usage per network. Automatically deleted after 30 days.
• A browser fingerprint hash — a one-way hash derived from your browser characteristics (canvas fingerprint), used as a secondary check alongside IP. Automatically deleted after 30 days. This hash cannot be reversed to identify you.

These are used solely to enforce the 30-minute free tier limit. They are not used for tracking, advertising, or any other purpose. Paid license holders are not subject to IP or fingerprint tracking.

3. License key data

If you purchase a subscription, we store the following in our database:

• Your license key (a random alphanumeric string)
• Subscription tier (Pro, Premium, or Business)
• Minutes used and total minutes for your plan
• License expiry date
• Stripe session ID, customer ID, and subscription ID (for renewal and support lookups)
• Activation count and redacted device IDs (first 8 characters only, for detecting abuse across devices)
• License activity log — last 50 events such as created, activated, renewed (for support and fraud prevention)

We do not store your email address in our database. Your email is handled by Stripe for payment processing and used transiently to deliver your license key via Gmail — it is not retained after delivery.

Your license key is stored in your browser's localStorage. It never leaves your device unless you manually enter it on another device.

4. Third-party services

• OpenAI Whisper API — audio transcription. Audio is deleted immediately after processing. Subject to OpenAI's Privacy Policy.
• Anthropic Claude API — subtitle translation and AI creator tools. Only text is sent, never audio or video. Subject to Anthropic's Privacy Policy.
• AssemblyAI — fallback transcription. Same data handling as Whisper — audio deleted immediately after processing.
• Stripe — payment processing. We never see your card details. Subject to Stripe's Privacy Policy.
• Upstash Redis — stores license key data and temporary free tier usage data as described above.
• Vercel — hosts our proxy server. Standard request logs may include IP addresses per Vercel's infrastructure policy.
• Gmail (Google) — used to deliver license keys by email. The email is sent transiently and not retained by us.
• Cloudflare — DDoS protection and CDN. May process IP addresses as part of network protection.

5. What we do NOT collect

• Your video or audio files
• Your transcript or subtitle content
• Your name or email address (unless you contact us or purchase a plan)
• Cookies of any kind
• Advertising or tracking data

6. Your rights (GDPR)

You have the right to access, delete, and export all data we hold about you. To exercise your rights, contact us at [email protected]. We will respond within 30 days.

To request deletion of your IP or fingerprint data from the free tier tracking, include your IP address and we will delete it immediately. To request deletion of your license data, provide your license key.

7. Data retention

• In-app data (video, audio, transcripts) — exists only in your browser session, wiped when you close the tab.
• Free tier IP and fingerprint hashes — automatically deleted after 30 days.
• License data — retained until your license expires, then subject to deletion on request.
• Payment records — retained as required by Swedish tax law (7 years).

8. Contact

[email protected]

UrlToSub is operated under Swedish law. GDPR applies.