Privacy & security
Designed to keep your setup private.
SubTranslate keeps provider credentials out of your manifest URL and gives each browser its own private profile.
Your profile password protects your settings
Each profile has a stable profile ID and a password that you choose. Save them together to sign in from another device. Passwords are stored only as slow, salted hashes; the configuration page uses a short-lived HttpOnly session after sign-in.
Provider credentials
Your OpenSubtitles and Gemini credentials are encrypted before they are stored on the server. They are never included in a Stremio manifest URL, and your player receives only the public addon URL needed to request subtitle files.
What the service stores
- Encrypted profile settings, a stable profile ID, a salted password hash and a hash of the legacy management token used only by profiles created before password sign-in. Inactive profiles may be removed according to the server's retention setting.
- Completed VTT subtitle files and their job metadata, so compatible players can retrieve ready subtitles. Safely matched shared translations may remain after the originating profile expires.
- Credential-free diagnostic records of manifest and subtitle requests to help operate the service. These logs are size-limited and rotated.
Your choices
You choose the provider credentials, target language and source subtitle. You can remove saved provider credentials, individual subtitle entries or the entire profile from the configuration page. Keep your profile ID and password if you want to manage the same profile from another browser or device.