Privacy Policy

This policy covers the SUBDL website (subdl.com), the public subtitle API (api.subdl.com and related hostnames), and the SubDL Player apps. It explains what we collect, why, who we share it with, and the choices you have. Our rules for using the service are in the Terms of Service.

• Account details. An email address, a username, and a password when you register, or the profile details your sign-in provider (such as Google or Telegram) shares when you connect it. Passwords and API keys are stored on our servers and are never shown publicly.
• Content you submit. Subtitle files, translations, release names, comments, ratings, reports, and profile information. Uploads are public by design — that is the service.
• Payment details. Payments are handled by external processors (for example PayPal or a cryptocurrency payment provider). We receive confirmation of the payment, the plan, and basic invoice data — never your card number or bank credentials.
• Support messages. Anything you send to our contact addresses.

• Server logs. IP address, user agent, requested URLs, and timestamps — used for security, rate limiting, abuse prevention, and keeping the service up.
• API usage. Requests and downloads made with your API key are counted against your plan's quotas.
• Aggregate visit counters. We keep our own aggregate counts of page visits.
• Google Analytics. The website loads Google Analytics 4, which sets its own identifiers and reports usage to Google. You can block it with any content blocker, and browser "Do Not Track" / Global Privacy Control signals are honored by Google's own controls.

• Your videos stay on your device. The app plays local files and streams in place. Video files are never uploaded to SUBDL.
• Subtitle search sends the video's filename (and series/season/episode details parsed from it) to the API so we can find matching subtitles. Choose the file names you open accordingly — the filename is the search query.
• AI translation processes subtitle text on our servers when you request a translation, tied to your account's quota.
• Anonymous usage events. The app sends a small set of feature events (for example "subtitle attached" or "translation started") with a random install identifier generated on your device. This identifier is not your account id, and events are not tied to your viewing history.
• Crash reports. The app uses Sentry to collect crash and error diagnostics (device model, OS version, stack traces) so we can fix defects. Crash reports are not used for advertising.
• Connecting your account is optional. Playback works without an account; subtitle download and translation require your API key, which the app stores in your device's secure storage.

• Signed-in state on the website lives in your browser's local storage; our public pages are served without personalizing server cookies.
• The SubDL website and Player apps contain no third-party advertising, and no third-party advertising push notifications. Notifications we send are our own — see below.

• They are opt-in, and they are ours. Browser notifications are only ever sent after you grant permission in your browser. They are sent by SubDL directly — no advertising network is involved, and we do not sell, share, or hand your subscription to anyone.
• What we store when you turn them on. The notification endpoint URL your browser generates and its two encryption keys (these together are what lets us deliver a message to that browser), plus your browser and operating system name, the country your request arrived from, your language, and the dates we first and last saw the device. If you are signed in, the record is linked to your account; if you are not, it is stored without an account and is linked to yours only if you later sign in on that browser.
• What we send. Alerts you asked for — a new subtitle for a title you follow, a translation you started finishing, a direct message, a comment on a subtitle you uploaded — and occasional news about SubDL. Each of these can be turned off separately under Account → Notifications, and news is a single toggle there.
• How to stop them. Turn them off under Account → Notifications, or revoke the permission in your browser's site settings. Either one ends delivery to that browser.
• How long we keep the record. Until you turn notifications off, until your browser's subscription expires or is rejected by the push service (we mark those and stop sending), or until you delete your account — deleting an account deletes its notification records with it.

• Provide, maintain, and improve subtitle search, download, upload, translation, and playback features.
• Enforce quotas, prevent abuse, block spam, and keep accounts secure.
• Process payments and provide the paid features you bought.
• Answer support requests and legal notices.
• Understand, in aggregate, which features are used so we can prioritize work.

We do not sell personal information, and we do not use your content or account data for third-party marketing.

• Public by design: uploads, comments, ratings, and uploader names appear publicly on the site and through the API.
• Service providers: infrastructure hosts, the content delivery network, payment processors, and the crash-reporting service (Sentry) process data for us so the service can run.
• Legal reasons: when required by law, or to protect the service and its users from abuse, fraud, or security threats.

Account data is kept while your account exists. Server logs and rate-limiting counters are short-lived and rotate automatically. Aggregate statistics are kept without personal identifiers. You can request deletion of your account by contacting us; public contributions (uploaded subtitles, comments) may remain, attributed to a removed account, because other users rely on them.

• You can use most of the website, and playback in the apps, without an account.
• You can edit profile details, rotate your API key, or disconnect linked sign-ins from your panel.
• You can request a copy or deletion of the personal data linked to your account by emailing us.
• Depending on where you live, you may have additional statutory rights; we honor requests as required by applicable law.

SUBDL is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child provided personal information, contact us and we will delete it.

We may update this policy from time to time. The updated date on this page shows when the current version took effect. Material changes will be reflected here before they apply.

Privacy questions and data requests: [email protected]. Copyright matters belong to the DMCA and Copyright Policy.