Privacy policy

Last updated 12 October 2026

This policy covers the YumSub browser extension and the website yumsub.wortie.app, run by the business named on the contact page. Questions: [fill in config.php → business].

What the extension sends, and where

The extension runs on Netflix, Disney+ and YouTube pages only. It reads the subtitle track the video player already loads, and nothing else from the page.

• Subtitle lines → YumSub server (with a licence or trial): the text of subtitle lines, the language pair, and your activation token, so the lines can be translated. Translations are stored in a shared cache keyed by the text alone — not by who asked. We log, per licence and per day, how many lines were translated and what that cost. We do not log which titles you watch.
• Subtitle lines → Google Translate (without a licence): the text of subtitle lines goes to translate.googleapis.com. Google's privacy policy applies.
• Words you look up → Wiktionary: the word you click goes to en.wiktionary.org for its dictionary entry.
• Activation: your licence key, a random device ID the extension creates when installed (not taken from your hardware), and a label such as "Chrome on Windows".

Your settings and saved words stay in your browser. We never receive your saved words, your browsing history, or anything from other websites.

AI translation

Lines not already in the cache are translated by Anthropic's Claude model, called from our server. Anthropic receives only the subtitle text — no account or device information — and does not train its models on it.

Your account and payments

For an account we store your email address, a hash of your password, your mobile number (asked at checkout because the payment gateway requires it), and your licence, device and payment records. Payments are processed by SSLCommerz; your card, bKash or Nagad details go to them and the wallet or bank directly — we never see them, only the payment method name and a receipt number.

Cookies

The website uses one cookie, needed to keep you logged in. No analytics, advertising or tracking.

Keeping and deleting data

Server logs with IP addresses are kept for at most 14 days. Payment records are kept as long as accounting rules require. You can ask us to show, correct or delete your data at [fill in config.php → business]; deleting your account removes your email, phone number, licences and devices.

Where data is processed

Our server is in Bangladesh. Anthropic and Google process requests in the United States.