Subucha shows YouTube captions in two languages, paired word by word. This policy covers the Subucha browser extension, the website subucha.cc, and the service behind them at api.subucha.cc. We collect what Subucha needs to work, and we don't sell your data or use it for advertising. The current version is at https://subucha.cc/privacy/.

WHAT WE COLLECT

• Your Google account. When you sign in with Google, we receive your email address and Google's ID for your account. We don't get your name, contacts, or anything else in your Google account.
• The videos you use Subucha on. When dual captions are on, or you open the Subucha panel on a video, the extension sends us the video's ID and your two languages. To align a video, it also sends the captions it downloaded from YouTube. We keep a list of the videos your account has opened, so a video you come back to isn't counted against your daily limit again.
• Words you look up. On Premium, clicking a word sends us that word and your languages, so we can fetch its definition.
• Usage and devices. We count the caption words you use each day, and the extension sends a random device ID it creates when it's installed. Both are used for your plan's daily and device limits. The device ID isn't based on your hardware or anything else about you.
• Payments. Stripe processes payments, so we never see your card details. We keep your Stripe customer ID, your plan, your subscription's status, and how long you've paid for.
• Technical data. Like any website, our servers see your IP address. We use it to limit abuse, and it's written to our server logs when a request fails.

WHAT STAYS IN YOUR BROWSER

The extension keeps your settings, your sign-in, its device ID, and recently loaded captions in your browser's extension storage. The website keeps your sign-in in your browser's local storage. Signing out of the extension removes its sign-in and ends that session on our servers. Uninstalling the extension removes everything it stored.

Neither the extension nor the website uses analytics, advertising, or tracking cookies.

HOW WE USE IT

Only to run Subucha: to sign you in, align and show captions, look up words, apply your plan's limits, bill you, keep the service safe from abuse, and fix problems. We don't sell or rent your data, and we don't use it for advertising or to decide anything about you outside Subucha.

Subucha's use of information received from Google APIs follows the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements.

WHO ELSE IS INVOLVED

We share data only with the services Subucha is built on, and only what each one needs:

• Google runs the sign-in.
• Stripe handles subscriptions and payments, under Stripe's privacy policy (https://stripe.com/privacy).
• Cloudflare carries the traffic to subucha.cc and api.subucha.cc.
• Our hosting provider runs the servers that store the data described here.
• YouTube. The extension downloads captions from YouTube in your browser, the same way YouTube's own player does.
• Wikimedia. Our servers fetch definitions from Wiktionary; your IP address isn't passed on. Pronunciation recordings play straight from Wikimedia Commons, so Wikimedia sees your IP address when you play one.
• Google Fonts serves the website's fonts.

Beyond these, we share data only when the law requires it.

HOW LONG WE KEEP IT

• Your account, usage totals, and list of videos stay until you delete your account. An account that has never paid is deleted automatically once it's 30 days old and hasn't been used for 30 days.
• A sign-in ends when you sign out, or after 180 days without use.
• Caption text is cached for about a week, so one video isn't processed twice, and then deleted. A cached caption isn't tied to your account after that.
• Server logs rotate automatically, and older entries are overwritten.
• Payment records can be kept longer where tax and accounting law require it.

YOUR CHOICES

You can sign out at any time. To delete your account, or to get a copy of the data we hold about you, email privacy@subucha.cc from the address you sign in with. Deleting your account cancels any subscription and removes your account, sign-ins, usage, devices, and video list.

CHILDREN

Subucha isn't meant for children under 13, and we don't knowingly collect data from them.

CHANGES

If this policy changes, we'll update https://subucha.cc/privacy/ and the date at the top.

CONTACT

Questions about privacy go to privacy@subucha.cc.