Privacy, stated plainly.

What leaves your device

Free tier

• Subtitle text is sent to Microsoft's text-to-speech service to be spoken. The request also carries your selected voice, a fixed application identifier shared by every YTDub installation, and a random per-request trace ID that is not reused.
• The request does not carry your account, video URL, or an identifier tied to you.
• Normal free playback does not call YTDub's server. During the limited early-testing phase, failures may send the filtered operational report described below.

Members

• Subtitle text and the video ID are sent to YTDub's server, then to a language-model provider, to rewrite machine-translated lines into natural speech.
• No other information about you is attached beyond the account token that proves membership. Speech synthesis works the same as on the free tier.

Operational diagnostics

The current pilot production build sends error reports by default; it does not send successful-run samples. Reports contain only fixed error categories, numeric status, random request ID, build version, counters, and timing. Since 23 August 2026 a report also carries your membership tier (free or member), the state of the language-model step, and a coarse summary of the playback attempt — seconds played back, subtitle line count, and flags for warm-up, ad playback, and how the attempt ended — so that a report can show the feature failed to work, not only that code threw an exception. They do not contain YouTube URLs, video IDs, subtitle text, error messages or stacks, tokens, authorization headers, or any timestamp taken on your device. If the server cannot be reached, up to 20 already-filtered reports remain in local extension storage for retry when the service worker next starts. Reports are rate-limited and written only to restricted operational logs. This is not analytics, and the path must be compiled out before a general public release.

Processor: Cloudflare. The server runs on Cloudflare Workers. Cloudflare's invocation log includes standard network metadata — IP address, approximate country, user agent, request and TLS metadata, and response status. Since 23 August 2026 that metadata is retained in Cloudflare Workers Logs for up to 3 days on Cloudflare's free plan and up to 7 days on a paid plan, then deleted by Cloudflare. It is visible only to the project's Cloudflare account operators and is not exported anywhere else. Retention is what links an error report to the request that produced it, and it is why this mode is limited to testers; it is switched off in the same change that removes the diagnostics path.

What stays on your device

The extension stores your account token and membership status (members only), diagnostics preference, up to 20 filtered error reports awaiting delivery, a cooldown record for YouTube rate limits, and a cache of refined subtitle text keyed by video ID for seven days.

No audio is stored. Synthesized speech lives in memory and is discarded.

What YTDub never does

• No advertising, ad identifiers, or tracking across sites.
• No selling or sharing of personal data.
• No analytics on the free tier.
• No collection of your YouTube account, watch history, or page content beyond the subtitle text being spoken.

Third parties

• Microsoft: text-to-speech. Receives subtitle text.
• A language-model provider: members only. Receives subtitle text and video ID through YTDub's server.
• YouTube: the subtitle track is fetched by YouTube's own player, not by YTDub.

Your choices

• Use Free without an account. Normal playback does not reach YTDub's servers; pilot error reports may do so as described above.
• Clear the on-device cache by clearing site data for youtube.com.
• Turn diagnostics off during the pilot; this stops new reports and does not affect playback.
• Members may delete their account and its data.

Contact

Questions about this policy: dinhquangvinh92@gmail.com