Privacy & security
Designed to keep your setup private.
SubTranslate keeps provider credentials out of your manifest URL and gives each browser its own private profile.
Your profile password protects your settings
Each profile has a stable profile ID and a password that you choose. Save them together to sign in from another device. Passwords are stored only as slow, salted hashes; the configuration page uses a short-lived HttpOnly session after sign-in.
Provider credentials
Your credentials are encrypted before they are stored on the server. They are never included in a Stremio manifest URL, and your player receives only the public addon URL needed to request subtitle files.
What the service stores
- Encrypted profile settings, a stable profile ID, a salted password hash and a hash of the legacy management token used only by profiles created before password sign-in. Inactive profiles may be removed according to the server's retention setting.
- Completed VTT subtitle files and their job metadata, so compatible players can retrieve ready subtitles. Safely matched shared translations may remain after the originating profile expires.
- Credential-free diagnostic records of manifest and subtitle requests to help operate the service. These logs are size-limited and rotated.
External services
Subtitle searches and downloads contact the providers you connect: OpenSubtitles, SubDL and/or SubSource. Requests use your provider credentials and relevant content identifiers, language choices or release information. Creating a translation sends subtitle cue text to Google Gemini using your Gemini key. For Kitsu or MyAnimeList content, animeapi.my.id receives the anime identifier to look up matching IMDb and episode information; it does not receive your profile password or provider credentials.
Your choices
You choose the provider credentials, preferred and optional secondary target language, and source subtitle. You can remove individual provider connections while keeping at least one subtitle provider connected, or delete the entire profile and its saved credentials from the configuration page. Individual subtitles cannot be removed from a profile; community-safe translations can remain available after a profile is deleted. Keep your profile ID and password if you want to manage the same profile from another browser or device.