Privacy Policy

Last updated: October 2026

1. Who We Are

Sublo is a Chrome extension and web service operated by Hannes Heißmeyer, Ibykusweg 6f, 30629 Hannover, Germany (info@trackable.pro). When this policy says "we", "us", or "our", it refers to that individual.

2. What Data We Collect

We collect only what is strictly necessary to provide the service:

  • Account data (Pro users only): email address and a hashed password, stored via Supabase.
  • Payment data (Pro users only): billing information is processed by Stripe. We never see or store your full card number. We only store a Stripe customer ID to link your subscription to your account.
  • Subscription status: whether your account is on the Free or Pro plan and when the current billing period ends.
  • Extension settings: your chosen languages, font sizes, colors and other UI preferences, stored locally in Chrome's chrome.storage.sync. These are synced across your Chrome installations by Google and are not sent to our servers.
  • Anonymous product analytics: so we can tell whether the extension actually works, we record a small number of milestone events — extension installed, subtitles first detected, daily free limit reached, upgrade prompt shown, upgrade clicked, Pro activated. Each event carries a randomly generated install identifier (not linked to your name, email or account), the streaming platform's domain (for example netflix.com), and the extension version — and, if your installation takes part in a price test (see below), the test and its group. The identifier lives only in your browser's local storage and is replaced if you reinstall the extension.
  • Daily viewing time: to decide how long the free daily time should be, the extension also reports, per day (UTC), how many minutes Sublo showed subtitles while a video played — the time that counts toward the free daily limit — whether the limit was reached, how long the video kept playing after that, and whether the installation is Pro. It sends these numbers a few times a day with the install identifier described above, the extension version and the store it came from (Chrome Web Store or Edge Add-ons). Never which site, video or subtitles you watched.
  • Uninstall feedback (optional): if you fill in the short survey shown after uninstalling, we store the reason you picked and — only if you choose to enter them — a free-text comment, the streaming service you had trouble with, and an email address so we can follow up.
  • Website statistics (subloapp.com): when you arrive on our website from somewhere else — another website, a search engine, a link, or by typing the address — and when you click a button that leads to the Chrome Web Store or Edge Add-ons, your browser tells our server which of our pages it was, the domain of the website you came from (for example google.com, never the full address), campaign tags in the link (utm_source, utm_medium, utm_campaign) and the page's language. To recognise the same visitor for up to 48 hours, our server forms a one-way hash from your IP address (IPv6: only its network part) and your browser's user-agent string together with a random value that changes every day and is deleted after three days. Your IP address itself is not stored, the hash is deleted after 48 hours, and nothing is stored on your device — no cookies, no local storage. When the extension reports its installation (the milestone event above), our server forms the same hash from that request to see whether the installation followed a visit to our website within the previous 48 hours. If so, we note with the install identifier which of our pages the visit started on, the website or campaign it came from and whether a store button was clicked; the hash is not stored with it. Chrome also opens our uninstall page when you remove the extension: that page is reported the same way, with the same short-lived hash, together with a few facts about the removed installation, worked out from its install identifier at that moment — whether it had reached the free daily limit in the previous 24 hours, whether it had Pro, and how much of that day's free viewing time (UTC) it had used; the identifier itself is not stored with it. If a new installation follows from the same browser within 48 hours, we note with it that it was a reinstall, when the uninstall page was opened, and those facts. If it follows within three hours on the same day, the free viewing time already used that day is handed back to the new installation, which carries on from there — removing and adding the extension does not restart the free daily limit — and we note that amount with it.
  • Problem reports (only when you send one): if you click “Send a report” in the extension popup, we receive technical details about the current tab — the site's domain (for example netflix.com), whether a video and subtitle tracks were detected (their number, format, language code and line count), how many subtitle lines were translated, whether our translation servers were reachable, your Sublo settings (languages, on/off), the extension and browser version, your browser language, and the install identifier described above — plus the description you type, if any. A report never contains subtitle text, translations, page addresses or your browsing history.
  • Feature requests (only when you send one): if you send an idea with “Request a feature” in the extension popup, we receive the text you typed together with the domain of the open tab (for example netflix.com), your browser language, the extension and browser version, whether your installation has Pro, and the install identifier described above. We use the identifier only to see how long the installation has been in use (from the milestone events and daily viewing times described above), to weigh the request. Never page addresses, subtitle text or your browsing history.
  • Upgrade page and price tests: when you open our upgrade page from the extension, the link contains the install identifier described above and which button you used (the banner in the video, the small upgrade button or the popup). From time to time we test prices: while a price test runs, new installations of the extension are assigned at random to a group (A or B) — never on the basis of anything about you — and the links to the upgrade page and to the welcome page shown after installation also contain the test and the group. Our server uses this to show your group's price; the price shown before you subscribe is the price you pay. For installations in a price test we record that the upgrade page was opened and that the payment page was started, with the identifier, the group, the chosen plan and the button. If you subscribe, the identifier, the button, the plan and the test group are stored with your checkout and subscription at Stripe. Our website stores nothing on your device for this.

We do not collect, log, or store:

  • Your browsing history, the URLs of pages you visit, or which titles you watch
  • Subtitle content, translations, or viewing history
  • IP addresses (apart from the short-lived hash for website statistics described above, and what our hosting and database providers log for security), or device fingerprints
  • Anything used for advertising, ad networks or data brokers — we neither sell nor share your data

Sublo contains no third-party analytics or tracking libraries. The milestone events described above go only to our own servers, and they record the streaming platform's domain — never the page URL, the video title, or your browsing activity.

Subtitle text is processed transiently. When Sublo translates a subtitle segment, the text is held in RAM exclusively for the purpose of generating a real-time translation overlay. No subtitle content is persisted to disk, transmitted to our servers, or stored beyond the duration of the active subtitle segment. This transient in-memory processing does not constitute "storage" under applicable copyright or data protection law.

3. How We Use Your Data

  • To create and manage your account (email + password)
  • To process your subscription payment and determine Pro access
  • To send transactional emails (e.g. payment receipts, subscription confirmation) — no marketing without your explicit consent
  • To measure whether Sublo works reliably — how often subtitles are detected, where detection fails, and how many people reach the free daily limit — using the anonymous milestone events described above
  • To set the free daily limit — how much of it people use each day — using the daily viewing times described above, counted in aggregate
  • To understand which of our pages, search engines and websites lead people to Sublo, and how often installations are removed and added again — counted in aggregate, using the website statistics described above
  • To keep the free daily limit the same for everyone, also when the extension is removed and added again the same day, using the website statistics described above
  • To find out which price works best — comparing the groups of a price test in aggregate, using the identifiers described above
  • To act on uninstall feedback and fix what made people leave
  • To investigate and fix the problems you report from the extension popup
  • To decide what to build next, using the feature requests you send from the extension popup

4. Third-Party Services

We use the following sub-processors:

  • Supabase (Supabase Inc., USA) – authentication and database. Supabase Privacy Policy
  • Stripe (Stripe, Inc., USA) – payment processing. Stripe Privacy Policy
  • Vercel (Vercel Inc., USA) – website and API hosting. Vercel Privacy Policy
  • Google LLC (Gemini API) (USA) – real-time subtitle translation. Subtitle text segments are sent to the Gemini API for translation. Google processes this data under its API Terms of Service and Privacy Policy. No account information is transmitted with translation requests. Gemini API Terms · Google Privacy Policy
  • OpenAI (OpenAI, L.L.C., USA) – fallback subtitle translation when the primary service is unavailable. Translation requests contain only the subtitle text, no account information. OpenAI Privacy Policy
  • Cloudflare (Cloudflare, Inc., USA) – edge hosting for the translation endpoint. Cloudflare Privacy Policy

Data transfers to the USA are covered by Standard Contractual Clauses (SCCs) as provided by each sub-processor.

5. Chrome Web Store Limited Use

Sublo's use and transfer of information received from Google APIs, and of any user data collected through the Chrome extension, adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Concretely:

  • We collect only what is needed to provide and operate Sublo's single purpose — showing and translating dual subtitles — including keeping that feature reliable.
  • We do not sell user data, pass it to data brokers, or use it for advertising, personalised ads or creditworthiness decisions.
  • We do not build user profiles and do not track you across websites.
  • No human reads your data except in aggregated form, or where you contacted us directly — asked for help, or sent a problem report or a feature request.
  • The extension bundles no third-party analytics or tracking code. Every request it makes goes to our own infrastructure or to the translation provider that renders your subtitles.

6. Legal Basis (GDPR)

  • Contract performance (Art. 6(1)(b) GDPR): processing necessary to provide the service you subscribed to.
  • Legitimate interest (Art. 6(1)(f) GDPR): fraud prevention and service security; the anonymous milestone events and daily viewing times, the cookieless website statistics and price tests, which tell us whether Sublo works, how much free time fits, how people find it and which price works; the problem reports and feature requests you send, to fix what doesn't work and decide what to build next.
  • Consent (Art. 6(1)(a) GDPR): any optional communications you opt in to.

7. Data Retention

Account data is retained for as long as your account exists. After account deletion, data is removed within 30 days, except where legal retention obligations apply (e.g. payment records for 10 years under German tax law).

Anonymous milestone events, daily viewing times and uninstall-survey responses are kept for up to 24 months and are used only in aggregate. Because they carry no account link, they cannot normally be traced back to an individual. If you entered an email address in the uninstall survey, you can ask us to delete it at any time.

Website statistics: the daily random value is deleted after three days and the hash after 48 hours. What remains — page, referring domain, campaign tags, language and time — identifies no one and is deleted after 90 days. The website source noted with an install identifier, including a noted reinstall, is kept like the milestone events.

Price tests: the records of upgrade-page visits and payment-page starts are kept like the milestone events (up to 24 months). What is stored with a checkout and subscription at Stripe is kept with the payment records.

Problem reports are kept for up to 24 months and are read individually to find and fix the problem you reported. They carry no account link; if you mention the report number when you email us, we can delete it on request.

Feature requests are kept for up to 24 months and are read individually to decide what to build next. They carry no account link; if you email us what you sent, we can delete it on request.

8. Your Rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Lodge a complaint with a supervisory authority (in Germany: BfDI)

To exercise any of these rights, email info@trackable.pro. We will respond within 30 days.

9. Cookies

The Sublo website (subloapp.com) uses no tracking cookies and no third-party analytics. Its statistics (section 2) store nothing on your device. The website remembers your language (chosen by you or taken from your browser's settings) in your browser's local storage, and Supabase may set a session cookie when you log in to manage your subscription. No third-party advertising cookies are used.

10. Children's Privacy

Sublo is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. The date at the top of this page will always reflect the latest version. For material changes, we will notify Pro subscribers by email.

12. Contact

Hannes Heißmeyer
Ibykusweg 6f, 30629 Hannover, Germany
info@trackable.pro
+49 15751477145

Last updated: October 2026