Privacy

Last updated 2026.

Subtext works without an account and asks for no personal details. This page lists everything that is processed when you use it.

What we process

• The video you ask for. We read that video's public captions from YouTube and keep a copy so later visitors get the page faster. The copy is not linked to you.
• Technical request data. Your IP address and browser identifier are used in memory to limit abuse and automated traffic. Hosting and network providers may keep short-lived access logs.
• Preferences on your device. Your theme and timestamp choices are stored in your browser's local storage and never sent to us.
• Your account, if you create one. The API needs an account. We keep your email address, the API keys you create (as hashes we cannot read back), your credit history and the ids of the videos your account fetched. To limit abuse we also keep a keyed hash of the network address that asked for a sign-in link and of the one the account was created from, and the browser identifier of each signed-in session. Sign-in links are sent by email; a session cookie keeps you signed in for up to 30 days.
• A referral label. When you follow one of our links to the API pages, one cookie remembers for 30 days which link it was (for example “footer”), so we can see which links are useful. It holds that word only: no identifier, nothing about you. If you then create an account, that word is saved with it.
• A verification cookie. When a human check is shown, Cloudflare Turnstile processes technical signals from your browser, and we set one cookie that remembers the result for 12 hours.

Video player

The video is loaded from YouTube only after you press play. From that moment YouTube's own privacy policy applies to the player.

Your choices

You can clear local storage and cookies in your browser at any time. To ask about data or request removal of a transcript, use the contact details on the About page.