Privacy Policy

Last updated: September 2026

1. Who We Are

Sublo is a Chrome extension and web service operated by Hannes Heißmeyer, Ibykusweg 6f, 30629 Hannover, Germany (info@trackable.pro). When this policy says "we", "us", or "our", it refers to that individual.

2. What Data We Collect

We collect only what is strictly necessary to provide the service:

  • Account data (Pro users only): email address and a hashed password, stored via Supabase.
  • Payment data (Pro users only): billing information is processed by Stripe. We never see or store your full card number. We only store a Stripe customer ID to link your subscription to your account.
  • Subscription status: whether your account is on the Free or Pro plan and when the current billing period ends.
  • Extension settings: your chosen languages, font sizes, colors and other UI preferences, stored locally in Chrome's chrome.storage.sync. These are synced across your Chrome installations by Google and are not sent to our servers.
  • Anonymous product analytics: so we can tell whether the extension actually works, we record a small number of milestone events — extension installed, subtitles first detected, daily free limit reached, upgrade prompt shown, upgrade clicked, Pro activated. Each event carries a randomly generated install identifier (not linked to your name, email or account), the streaming platform's domain (for example netflix.com), and the extension version. The identifier lives only in your browser's local storage and is replaced if you reinstall the extension.
  • Uninstall feedback (optional): if you fill in the short survey shown after uninstalling, we store the reason you picked and — only if you choose to enter them — a free-text comment, the streaming service you had trouble with, and an email address so we can follow up.

We do not collect, log, or store:

  • Your browsing history, the URLs of pages you visit, or which titles you watch
  • Subtitle content, translations, or viewing history
  • IP addresses or device fingerprints beyond what our hosting and database providers log for security
  • Anything used for advertising, ad networks or data brokers — we neither sell nor share your data

Sublo contains no third-party analytics or tracking libraries. The milestone events described above go only to our own servers, and they record the streaming platform's domain — never the page URL, the video title, or your browsing activity.

Subtitle text is processed transiently. When Sublo translates a subtitle segment, the text is held in RAM exclusively for the purpose of generating a real-time translation overlay. No subtitle content is persisted to disk, transmitted to our servers, or stored beyond the duration of the active subtitle segment. This transient in-memory processing does not constitute "storage" under applicable copyright or data protection law.

3. How We Use Your Data

  • To create and manage your account (email + password)
  • To process your subscription payment and determine Pro access
  • To send transactional emails (e.g. payment receipts, subscription confirmation) — no marketing without your explicit consent
  • To measure whether Sublo works reliably — how often subtitles are detected, where detection fails, and how many people reach the free daily limit — using the anonymous milestone events described above
  • To act on uninstall feedback and fix what made people leave

4. Third-Party Services

We use the following sub-processors:

  • Supabase (Supabase Inc., USA) – authentication and database. Supabase Privacy Policy
  • Stripe (Stripe, Inc., USA) – payment processing. Stripe Privacy Policy
  • Vercel (Vercel Inc., USA) – website and API hosting. Vercel Privacy Policy
  • Google LLC (Gemini API) (USA) – real-time subtitle translation. Subtitle text segments are sent to the Gemini API for translation. Google processes this data under its API Terms of Service and Privacy Policy. No account information is transmitted with translation requests. Gemini API Terms · Google Privacy Policy
  • OpenAI (OpenAI, L.L.C., USA) – fallback subtitle translation when the primary service is unavailable. Translation requests contain only the subtitle text, no account information. OpenAI Privacy Policy
  • Cloudflare (Cloudflare, Inc., USA) – edge hosting for the translation endpoint. Cloudflare Privacy Policy

Data transfers to the USA are covered by Standard Contractual Clauses (SCCs) as provided by each sub-processor.

5. Chrome Web Store Limited Use

Sublo's use and transfer of information received from Google APIs, and of any user data collected through the Chrome extension, adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Concretely:

  • We collect only what is needed to provide and operate Sublo's single purpose — showing and translating dual subtitles — including keeping that feature reliable.
  • We do not sell user data, pass it to data brokers, or use it for advertising, personalised ads or creditworthiness decisions.
  • We do not build user profiles and do not track you across websites.
  • No human reads your data except in aggregated form, or where you contacted us directly and asked for help.
  • The extension bundles no third-party analytics or tracking code. Every request it makes goes to our own infrastructure or to the translation provider that renders your subtitles.

6. Legal Basis (GDPR)

  • Contract performance (Art. 6(1)(b) GDPR): processing necessary to provide the service you subscribed to.
  • Legitimate interest (Art. 6(1)(f) GDPR): fraud prevention and service security.
  • Consent (Art. 6(1)(a) GDPR): any optional communications you opt in to.

7. Data Retention

Account data is retained for as long as your account exists. After account deletion, data is removed within 30 days, except where legal retention obligations apply (e.g. payment records for 10 years under German tax law).

Anonymous milestone events and uninstall-survey responses are kept for up to 24 months and are used only in aggregate. Because they carry no account link, they cannot normally be traced back to an individual. If you entered an email address in the uninstall survey, you can ask us to delete it at any time.

8. Your Rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Lodge a complaint with a supervisory authority (in Germany: BfDI)

To exercise any of these rights, email info@trackable.pro. We will respond within 30 days.

9. Cookies

The Sublo website (subloapp.com) does not use tracking cookies or analytics. Supabase may set a session cookie when you log in to manage your subscription. No third-party advertising cookies are used.

10. Children's Privacy

Sublo is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. The date at the top of this page will always reflect the latest version. For material changes, we will notify Pro subscribers by email.

12. Contact

Hannes Heißmeyer
Ibykusweg 6f, 30629 Hannover, Germany
info@trackable.pro
+49 15751477145

Last updated: September 2026