dubly.me

Legal

Privacy Policy

dubly.me is a Chrome extension that dubs YouTube videos in real time. This page explains what data we collect, why, and how it is handled.

What we collect

  • —Email address — when you create an account or sign in.
  • —Subtitle text from the video you are watching — sent to our server only when you activate dubbing, in order to translate it and generate dubbed audio. For YouTube videos fetched through our server, we cache the video's original subtitle track against the public video ID so that repeat views do not re-fetch it. Translations are cached the same way, against the video ID and target language, so the same video is not translated twice. Neither cache is linked to your account.
  • —Usage event data, linked to your account — for each dubbing session: the platform (for example YouTube, Udemy, Vimeo, Netflix, Coursera, LinkedIn Learning, edX, TED or Rumble), a video identifier, your target language, the number of subtitle segments and the number of characters synthesized. Used to enforce plan limits and for basic service analytics.
  • —Language and voice preferences (target language, voice gender, speech provider) — stored on our server against your account, so your settings follow you across sessions.
  • —Approximate country — derived from your IP address via our hosting provider, used for analytics and abuse detection.
  • —A one-way, salted hash of your IP address — used only to detect abuse of the free plan across multiple accounts. We do not store your raw IP address.
  • —A random installation identifier — created in your browser the first time the extension contacts our server and kept in extension storage. We use it to count free minutes per installation as well as per account, so the free plan cannot be reset by signing up with a new email address. It is not linked to your identity, contains no device or hardware information, and is gone when you remove the extension.
  • —Audio from the video you are watching — only when the video has no subtitles at all, and only on paid plans. It is sent for automatic transcription, so that there is something to translate and dub. The audio itself is not stored; the resulting transcript is cached against the public video ID, like a subtitle track, and is not linked to your account.
  • —Dubbed audio that we generate for you — stored on our servers so the same sentence, in the same language and voice, does not have to be synthesized twice. Each file is addressed by the content of the sentence, not by the video and not by you: it carries no account identifier, and the same file is reused for anyone whose dub produces that sentence. On the free plan these files are served from a public storage address; on paid plans they are served through short-lived signed links. Files are deleted after 90 days.

How we use it

  • —Email is used solely for authentication (Supabase Auth). We do not send marketing emails.
  • —Subtitle text is forwarded to a translation provider and to a text-to-speech provider to generate the dubbed audio. Neither stores this text beyond the duration of the request.
  • —Usage event data is stored to apply plan limits and to understand which platforms and languages the service is used on. Minute counts reset each calendar month.
  • —We do not sell, rent, or trade your personal data to any third party, ever.

Third-party services

  • —Supabase — authentication and database (email, plan, usage events, preferences). Privacy policy: supabase.com/privacy.
  • —Translation providers — DeepSeek by default, with Anthropic Claude, Groq, Microsoft Translator and DeepL used as alternatives or fallbacks. No data is retained for training.
  • —Speech synthesis providers — Microsoft Edge TTS, OpenAI and ElevenLabs. Text is processed in real time and not stored.
  • —Stripe — payment processing. We never see or store your card details. Privacy policy: stripe.com/privacy.
  • —Speech recognition provider — Groq, used only when a video has no subtitles of its own. Audio is processed in real time, is not stored and is not retained for training.

Data retention

  • —Your account data (email, plan status, usage data) is kept for as long as your account exists.
  • —Subtitle text, translations and dubbed audio are not stored against your account. Original subtitle tracks and their translations are cached against the public video identifier; dubbed audio is cached against the content of the spoken sentence itself. Audio files are deleted after 90 days.
  • —You can delete your account at any time by emailing us.

Your rights

  • —You have the right to access, correct, or delete your personal data at any time.
  • —To export or delete your data, contact us at the address below.
  • —If you are in the European Economic Area, you have additional rights under the GDPR.

Cookies

  • —We set no tracking or advertising cookies unless you opt in. Choosing "necessary only" in the cookie notice means none are set at all. If you accept analytics, Google Analytics sets cookies and your IP address is anonymized.
  • —Your extension sign-in session is held in the browser's extension storage, not in cookies. The extension does not read or send cookies from the sites you visit.

Contact

  • —Questions or requests: hello@dubly.me
  • —Last updated: August 1, 2026

Limited use

  • —Data collected by dubly.me is used solely to provide and improve the dubbing service. We do not use your data for advertising, interest-based profiling, or any purpose unrelated to the extension's core function.

Data security

  • —All data transmitted to our servers is sent over encrypted HTTPS connections.
  • —Account data stored in our database (Supabase) is protected using industry-standard security measures. The audio of the video you are watching is never stored. The dubbed audio we generate is stored, addressed by the content of the sentence and with no link to your account: on the free plan it is served from a public storage address, and on paid plans through short-lived signed links. Subtitle tracks and their translations are cached against public video identifiers, with no link to your account.

Chrome permissions

  • —storage — keeps your sign-in session and your interface preferences in the browser.
  • —scripting — detects the active video and injects the dubbing interface. We read only subtitle data from the page, not your browsing history or personal content.
  • —identity — used only for the optional "Continue with Google" sign-in flow.
  • —Host permissions — required to run the extension on the video sites where you activate dubbing. The extension only acts on a page once it finds a video element and you start a dub.

Children's privacy

  • —dubly.me is not directed at children under the age of 13. We do not knowingly collect personal data from children.

Policy updates

  • —If we make material changes to this policy, we will update the date at the bottom of this page.
  • —Continued use of the extension after changes are posted constitutes acceptance of the updated policy.

Data Controller

  • —Sisum OÜ, registry code 16335961.
  • —Kaasiku tn 32b, Jõhvi küla, Jõhvi vald, 41541 Ida-Viru maakond, Estonia.
  • —Contact: hello@dubly.me

Legal Basis for Processing (GDPR Art. 6)

  • —Email address — contract performance (Art. 6(1)(b)): necessary to authenticate and manage your account.
  • —Usage data — contract performance (Art. 6(1)(b)): necessary to enforce the free plan limit.
  • —Subtitle text — contract performance (Art. 6(1)(b)): necessary to provide the dubbing service.

Supervisory Authority

  • —You have the right to lodge a complaint with a supervisory authority. In Estonia: Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee.
  • —If located in another EU/EEA country, you may contact your local supervisory authority.

California Residents (CCPA)

  • —We do not sell personal data. California residents may contact us at hello@dubly.me to exercise any additional rights under CCPA.