Privacy

Who runs this

Sub-Optimal is a hobby project run by Jakub Szura, who is responsible for your data under the GDPR. For anything on this page, write to jakubsz.123@gmail.com.

What we keep, and why

• Your account: email, name, password (stored only as a hash), the languages you picked and your settings. Needed to run your account.
• What you do in the app: the subtitles in your library, words you mark, sentences you save, practice and watch history, and streaks. This is the product: it's how the app knows what you know.
• Things you choose to connect: a Plex or Jellyfin address and access token, YouTube channels you follow, a notification topic, push notifications on a device, browser-extension keys. Used only for that feature.
• Usage counts: how many times your account used features that cost money or have a daily limit (vocabulary lists, subtitle downloads, translations). Just the numbers, not what you looked up. We keep them to stop abuse and keep the costs manageable, which is our legitimate interest; they aren't used for anything else.
• Error reports: when something breaks, the report can include your account's internal ID (never your name or email) so we can fix it.

The app doesn't save your IP address. It's held in memory for up to a day to rate-limit requests, then forgotten. There are no analytics, ads or trackers. The only cookies keep you signed in and remember your interface language.

Who else sees any of it

We don't sell or share your data. A few services do part of the work:

• OVHcloud hosts the server the app and its data run on, in Germany.
• An AI provider (OpenAI or Anthropic) receives the subtitle text you make a vocabulary list from, the words you already know (so they're skipped), and lines you ask to translate. It never gets your name or email.
• DeepL receives single words to translate, when the dictionary has no entry.
• Notification services: your browser's push service if you turn on notifications, and the ntfy server you pick if you set a topic.
• Catalogues (OpenSubtitles, TVmaze, TMDB, iTunes, LRCLIB, YouTube) receive the title or link you look up, sent from machines we run, never who you are.

Some of these companies process data outside the EU, mainly in the United States, under their own data-protection terms.

How long

• Your account, activity and usage counts: until you delete your account.
• Sign-in sessions: 7 days, then deleted.
• A subtitle you upload without an account: kept with no link to you, so the next person with the same file doesn't have to upload it again.

Your rights

You can ask for a copy of your data, a correction, or for your account and everything in it to be deleted. You can also object to any of the uses above. Email jakubsz.123@gmail.com from the address on your account and we'll handle it within a month. If you're unhappy with the answer, you can complain to your local data-protection authority.

Age

You need to be 16 or older to create an account.

Changes

If this changes, we'll update this page and the date at the top.