dubly.me

Legal

Privacy Policy

dubly.me is a browser extension (Chrome, Firefox) that dubs videos on YouTube, Netflix and other platforms in real time. This page explains what data we collect, why, and how it is handled.

What we collect

  • —Email address — when you create an account or sign in.
  • —Subtitle text from the video you are watching — sent to our server only when you activate dubbing, in order to translate it and generate dubbed audio. For YouTube videos fetched through our server, we cache the video's original subtitle track against the public video ID so that repeat views do not re-fetch it. Translations are cached the same way, against the video ID and target language, so the same video is not translated twice. Neither cache is linked to your account.
  • —Usage event data, linked to your account — for each dubbing session: the platform (for example YouTube, Udemy, Vimeo, Netflix, Coursera, edX, TED or Rumble), a video identifier, your target language, the number of subtitle segments and the number of characters synthesized. Used to enforce plan limits and for basic service analytics.
  • —Language and voice preferences (target language, voice gender, speech provider) — stored on our server against your account, so your settings follow you across sessions.
  • —Approximate country — derived from your IP address via our hosting provider, used for analytics and abuse detection.
  • —A one-way, salted hash of your IP address — used only to detect abuse of the free plan across multiple accounts. We do not store your raw IP address.
  • —A random installation identifier — created in your browser the first time the extension contacts our server and kept in extension storage. We use it to count free minutes per installation as well as per account, so the free plan cannot be reset by signing up with a new email address. It is not linked to your identity, contains no device or hardware information, and is gone when you remove the extension.
  • —Audio from the video you are watching — only when the video has no subtitles at all, and only on paid plans. It is sent for automatic transcription, so that there is something to translate and dub. The audio itself is not stored; the resulting transcript is cached against the public video ID, like a subtitle track, and is not linked to your account.
  • —Service events, linked to your account and installation identifier — when a plan limit is reached, when a dubbing request fails on our side, when dubbed audio fails to play in your browser, how long the first dubbed sentence took to start (recorded only as a range, such as 2–4 seconds), when the pricing screen in the extension is opened, how your account was created (after reaching a limit, by upgrading a guest session, or directly), and, if you choose to answer, how you heard about dubly.me (picked from a fixed list: store search, a friend, YouTube or social media, the dubly.me website, or other). The name of your browser (for example Chrome or Firefox) is recorded with these events, with dubbing usage records and with feedback you send. Used to understand where the free plan stops working for people, which channels bring new users, and how to make dubbing start faster and fail less often. No video identifier, subtitle text or IP address is recorded with these events.
  • —Feedback you choose to send — if you rate a dub in the extension, we store your rating (thumbs up or thumbs down), your optional comment, the address of the video page, the target language and the platform, linked to your account and installation identifier. When you rate a dub as bad, the original subtitle lines and their translations from that video are sent to an AI provider to find out what went wrong.
  • —Emails you send to our support address — if you write to hello@dubly.me, we store the sender address, the recipients, the subject, the plain text of the message and its date. Attachments are not stored.
  • —If you use the dubly.me Android app: the ID of the YouTube video you share to the app, and the playback state of the YouTube app (playing or paused, position, speed and video title), which the app reads on your device through Android's notification access. The app does not read your notifications. The playback state stays on your device.
  • —When you remove the extension — your browser opens a page on dubly.me. Its address carries the extension version, your dubbing language, a rough usage level (not tried, tried or used) and roughly how long the extension was installed. Answering the question on that page is optional. The visit and your answer are not stored with your account, your installation identifier or your IP address, and are deleted after 180 days.
  • —If dubbing fails on a site other than YouTube, we store the site's name (for example example.com) so we know which sites to support. We do not store the page address or the video.

How we use it

  • —Your email address is used to sign you in (Supabase Auth), to send service emails about your account and subscription (for example a payment confirmation or a renewal reminder) and, only if you send us feedback, to reply to it. We do not send marketing emails.
  • —Subtitle text is forwarded to a translation provider and to a text-to-speech provider to generate the dubbed audio. Neither stores this text beyond the duration of the request. The text to be spoken may be sent to the speech provider directly from your browser; in that case the provider also receives your IP address.
  • —Usage event data is stored to apply plan limits and to understand which platforms and languages the service is used on. Minute counts reset every day at 00:00 UTC.
  • —We do not sell, rent, or trade your personal data to any third party, ever.
  • —Feedback is used to find and fix problems with dubbing quality and to reply to you. A reply may be drafted with the help of an AI provider; a person reads and approves every reply before it is sent.
  • —Support emails are used to answer you. An AI provider sorts each email into a category (payment, problem, question or spam) and detects its language, and may help draft a reply; a person reads and approves every reply before it is sent.
  • —The Android app uses the YouTube app's playback state only on your device, to start each dubbed sentence at the right moment. Like the browser extension, it sends the video ID and the subtitles to our server to translate and voice them.

Third-party services

  • —Supabase — authentication and database (email, plan, usage events, preferences). Privacy policy: supabase.com/privacy.
  • —Translation providers — on YouTube, the free plan in the current extension uses YouTube’s own auto-translate in your browser, so the subtitle text does not reach our translation providers. Older extension versions, and free use on other sites until that is switched off, still send it to the providers below, as does AI translation on Basic: DeepSeek by default, with Groq, Google Gemini (paid API) and Anthropic Claude used as alternatives or fallbacks. No data is retained for training.
  • —Speech synthesis providers — Microsoft Edge TTS, Google Cloud Text-to-Speech and OpenAI. Text is processed in real time and not stored.
  • —Stripe — payment processing. We never see or store your card details. Privacy policy: stripe.com/privacy.
  • —Speech recognition provider — Groq, used only when a video has no subtitles of its own. Audio is processed in real time, is not stored and is not retained for training.
  • —Brevo — sends our emails (sign-in and confirmation emails, account and subscription emails, replies to your feedback). It receives your email address and the content of the email. Privacy policy: brevo.com/legal/privacypolicy.
  • —AI providers for feedback and support emails — Groq diagnoses the translation behind a dub you rated as bad, and replies to your feedback may be drafted with one of the translation providers listed above. Support emails sent to hello@dubly.me are classified into a category and may have a reply drafted the same way. The same terms apply: no data is retained for training.
  • —Resend — receives emails sent to our support address and passes them to our server. It processes the sender address and the content of the email. Privacy policy: resend.com/legal/privacy-policy.
  • —YouTube (Google) — to read a video's subtitles, the Android app loads the YouTube page of the video you shared inside the app without showing it or playing the video. YouTube receives your IP address and device information, as with any visit to YouTube. Privacy policy: policies.google.com/privacy.

Data retention

  • —Your account data (email, plan status, usage data) is kept for as long as your account exists.
  • —Subtitle text and translations are not stored against your account. Original subtitle tracks and their translations are cached against the public video identifier. Dubbed audio for your videos is generated for each request and is not stored on our servers. The only exception is our sample video: we prepare its dubbed audio in advance and keep it on our servers so it starts quickly. It contains no data about you.
  • —You can delete your account at any time in the extension: open it while signed in and press Delete account. You can also email us at hello@dubly.me.
  • —Service events are deleted after 180 days. Events linked to your account are deleted together with your account.
  • —Feedback is kept for as long as your account exists and is deleted together with your account.
  • —Support emails are deleted one year after the last message in the conversation.
  • —When you delete your account, we keep a one-way hash of your email address — not the address itself — for two purposes. So that the free plan's daily limit cannot be reset by deleting an account and creating it again, the hash and that day's usage are kept until the end of the following day. So that we do not send you our one-time request for a store review a second time, the hash is kept until you ask us to remove it.

Your rights

  • —You have the right to access, correct, or delete your personal data at any time.
  • —To export or delete your data, contact us at the address below.
  • —If you are in the European Economic Area, you have additional rights under the GDPR.

Cookies

  • —We set no tracking or advertising cookies unless you opt in. Choosing "necessary only" in the cookie notice means none are set at all. If you accept analytics, Google Analytics sets cookies and your IP address is anonymized.
  • —Your extension sign-in session is held in the browser's extension storage, not in cookies. The extension does not read or send cookies from the sites you visit.

Contact

  • —Questions or requests: hello@dubly.me
  • —Last updated: October 24, 2026

Limited use

  • —Data collected by dubly.me is used solely to provide and improve the dubbing service. We do not use your data for advertising, interest-based profiling, or any purpose unrelated to the extension's core function.

Data security

  • —All data transmitted to our servers is sent over encrypted HTTPS connections.
  • —Account data stored in our database (Supabase) is protected using industry-standard security measures. Neither the audio of the video you are watching nor the dubbed audio we generate for your videos is stored on our servers; the sample video’s dubbed audio is the only exception. Subtitle tracks and their translations are cached against public video identifiers, with no link to your account.

Chrome permissions

  • —storage — keeps your sign-in session and your interface preferences in the browser.
  • —scripting — detects the active video and injects the dubbing interface. We read only subtitle data from the page, not your browsing history or personal content.
  • —identity — used only for the optional "Continue with Google" sign-in flow.
  • —Host permissions — required to run the extension on the video sites where you activate dubbing. The extension only acts on a page once it finds a video element and you start a dub.

Children's privacy

  • —dubly.me is not directed at children under the age of 13. We do not knowingly collect personal data from children.

Policy updates

  • —If we make material changes to this policy, we will update the date at the bottom of this page.
  • —Continued use of the extension after changes are posted constitutes acceptance of the updated policy.

Data Controller

  • —Sisum OÜ, registry code 16335961.
  • —Kaasiku tn 32b, Jõhvi küla, Jõhvi vald, 41541 Ida-Viru maakond, Estonia.
  • —Contact: hello@dubly.me

Legal Basis for Processing (GDPR Art. 6)

  • —Email address — contract performance (Art. 6(1)(b)): necessary to authenticate and manage your account.
  • —Usage data — contract performance (Art. 6(1)(b)): necessary to enforce the free plan limit.
  • —Subtitle text — contract performance (Art. 6(1)(b)): necessary to provide the dubbing service.
  • —Feedback — legitimate interest (Art. 6(1)(f)): improving dubbing quality and replying to feedback you chose to send us.
  • —Support emails — legitimate interest (Art. 6(1)(f)): answering the messages you send us.

Supervisory Authority

  • —You have the right to lodge a complaint with a supervisory authority. In Estonia: Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee.
  • —If located in another EU/EEA country, you may contact your local supervisory authority.

California Residents (CCPA)

  • —We do not sell personal data. California residents may contact us at hello@dubly.me to exercise any additional rights under CCPA.