Privacy Policy

Last updated: 2026-10-30Effective date: 2026-10-30

This policy explains three things: what data DongYouGuan collects from you, who we pass it to, and how long we keep it. It applies to the DongYouGuan Chrome extension (Chrome Web Store name: 懂油管 - 中文字幕翻译 for YouTube™) and to this website.

1. Who we are

Operator: Vector Leap (Zhongshan) Technology Co., Ltd. (向量跃迁（中山）科技有限责任公司; Unified Social Credit Code 91442000MAKL5PFN10). Payments are collected by Paddle: Paddle.com is the Merchant of Record for all our orders, and card statements show a descriptor starting with PADDLE.NET*.

For privacy questions, email:

support@dongyouguan.com

2. What we collect

The table below goes row by row: what the data is, where it goes, who processes it and how long it stays. If it is not in the table, we do not collect it. Rows marked "sent automatically" are sent without you clicking anything when you use hosted translation; rows marked "sent only when you click" or "sent on a keyboard shortcut" are sent only when you take that action. The three rows marked "own API key mode" apply only when you use your own API key.

Data	Where it goes	Who processes it	How long it is kept
Sent automatically: subtitle text of the current video, and the video's title, description, channel name and chapter names	Our server (Cloudflare Workers)	DeepSeek (primary) and Alibaba Cloud Tongyi (backup), to translate	Not stored against your account. The shared cache is currently off; when it is turned on, it will be keyed by a hash of the request content only, with no account, kept for at most 30 days, and this policy will be updated first
Sent automatically: the text of comments to be translated (comment translation is on by default; only the comment body is sent, not the commenter's name; turn off "Translate comments" in the popup to stop)	Same as above	Same as above	Not stored against your account
Sent automatically: video titles in the home page and search results (title translation is on by default; turn off "Translate home and search titles" in the popup to stop)	Same as above	Same as above	Not stored against your account
Sent on a keyboard shortcut: your Chinese search words (when you press ⌘+Enter or Ctrl+Enter in the YouTube search box)	Same as above	Same as above	Not stored against your account
Sent only when you click: when you generate an AI overview, the video's subtitle text with its title, description and channel name	Same as above	Same as above	Not stored against your account; the overview itself is kept only on your device
Sent only when you click: when you use "Explain this" on selected text, the passage you selected, a few subtitle lines around it and the video title	Same as above	Same as above	Not stored against your account
Sent only when you click: when you ask AI to label uncategorised terms in the glossary, the terms that have no category yet (source and translation)	Same as above	Same as above	Not stored against your account
Sent only when you click: when you use region translate, the small area of the video picture you select, compressed into one image (longest side at most 1280 pixels)	Same as above	DeepSeek (primary) and Alibaba Cloud Tongyi (backup), to read the text in the image and translate it	Our server does not store the image, does not write it to logs and does not put it in the shared cache. Like other requests, the usage record notes the token count and time, marked as region translate; no video ID is recorded
Deep analysis for investment risk hints: the video's subtitle text (numbered sentences) with its title, description and channel name. Free accounts send it only when they click "Deep analysis"; members get it automatically; turn off "Investment risk hints" in Settings to stop	Same as above	DeepSeek (this feature does not fall back to the backup model)	Subtitles are not stored against your account. Free accounts also have a count record (account, video ID, number of runs, result status), kept for at most 90 days
Glossary: entries that match the current subtitles when translating; and the industry keywords you type when you use AI to generate glossary terms	Sent with the translation request to our server, then to the model provider; the full glossary is also kept on your own device	DeepSeek (primary) and Alibaba Cloud Tongyi (backup)	Not stored against your account; the industry keywords are not stored
Sent automatically after you click "Keep going with basic translation": subtitle text of the current video, the video's title, description and chapters, comment text being translated, video titles on the home page and in search results, and Chinese search terms you type	Your browser sends them directly to Microsoft Translator or Google Translate (Microsoft first; Google when Microsoft is unavailable, or for search terms that contain quotes); they do not go through DongYouGuan's server	Microsoft, Google	We cannot see or store them; how they handle them is governed by their own terms
Video ID (sent in the request body of translation and similar requests, not in the URL or headers)	Our server	Us, to count quota and handle refunds, not to analyse what you watch	Stored with usage records for 90 days, then only monthly totals are kept
When you sign in with Google: your email and Google account ID (we ask Google only for the openid and email scopes)	From Google to our server	Google verifies who you are; we store the email and account ID	While your account exists; deleted within 30 days after you delete the account
Sign-in email and account ID	Our server	Email delivery service: Resend, to send sign-in codes and reminder emails before monthly or yearly renewals	While your account exists; deleted within 30 days after you delete the account
Random device ID generated at install	Our server	Us, reported at every sign-in and used only to match invites and to tell whether invite rewards and invite discounts are going to several accounts on the same computer	About 12 months after last use (device ID); also kept for about 12 months after you delete your account
Usage records: account, video ID, tokens used, which model provider, time, which kind of feature	Our server	Us	90 days, then only monthly totals are kept; deleted within 30 days after you delete the account
Order records: amount, time, plan type, status returned by the payment provider	Our server, Paddle	Paddle, the payment service provider and Merchant of Record for all our orders	Kept if you have ever paid, for reconciliation, chargebacks and tax, for 10 years (Article 29 of the Implementing Rules of the PRC Tax Collection and Administration Law; counted from the end of the accounting year in which the payment was made); still kept after you delete your account: the records no longer hold your email, but they keep payment-provider IDs such as Paddle transaction and customer IDs, for tax reconciliation, refunds and chargebacks, and the payment provider can trace these IDs back to the payer
Hash of the Paddle customer ID: the customer ID the payment provider Paddle gives us at payment (Paddle tells customers apart by the email entered at checkout, so the same payment email means the same customer ID), stored only as a keyed one-way value, from which the customer ID or email cannot be worked out. Paddle does not provide payment-method fingerprints such as card or wallet identifiers, and we do not store any	Our server	Us, only to tell whether two accounts are the same person when granting invite rewards (the inviter's reward days and the friend's bonus days), to stop repeat claims	Kept together with the payment records for 10 years, counted from the end of the accounting year of the last payment under that customer ID, then deleted; the same applies after you delete your account
A value computed from your email (normalised first, for example to lower case and without any “+” alias part) with a keyed one-way function. The email cannot be worked out from it, but the same email always gives the same value	Our server	Us, only to recognise the same email: when granting invite rewards and the invite discount the new account is treated as the same person as the deleted one	Created at sign-up and kept while the account exists; kept for another 365 days after deletion, then deleted
Invite relationships and reward ledger: invite codes, who invited whom and when it was bound, and the ledger of reward days (including the matching payment ID). The person who invited you can see in the extension your masked email (only the first and last letters and the full domain), when you were bound, when you first paid, and the reward status	Our server	Us, to grant and check invite rewards	While your account exists; after you delete the account, your invite code and the invite in which you were the invitee are deleted; your reward-day ledger (days earned by inviting others, bonus days you received as an invitee, redemptions and expiries), the invites you made, entries in other people's reward ledgers that refer to you, and your membership records (including memberships redeemed from invite days) are kept, moved to a placeholder ID that holds no email, without affecting days the other person already received
Sign-in token	Stored only in your own browser; sent to our server in a request header with each request to confirm it is you	Us	A sign-in stays active for 90 days. We do not have your password
IP address in server access logs	Our server, Cloudflare	Cloudflare. We only use it for loose rate limiting and do not use it to infer your location	30 days
Sent only after you click "Allow analytics" on this website: the address of the page you visit on this website, the site you came from, browser and device type, approximate region, visit time and how long you stay on the page, and a random visitor ID stored in a cookie whose name starts with _ga (the extension does not collect any of this)	Sent by your browser directly to Google Analytics, whose servers are outside mainland China	Google, to measure how the website is used (see section 12)	Google keeps the detailed data that can be tied to the visitor ID for 2 months, then only aggregated reports without it; the cookie in your browser expires 60 days after your last visit and is deleted when you withdraw consent
Own API key mode: subtitle text and video information	Sent directly to the endpoint address you enter yourself, not through our server; we cannot see it	The provider you choose	We do not store it. How that provider handles it is governed by your terms with them
Own API key mode: the small image area you select with region translate	Sent by your browser directly to the endpoint address you enter yourself, not through our server; we cannot see it	The provider you configure	We do not store it. How that provider handles it is governed by your terms with them
Own API key mode: your API key	Stored only in your own browser	None	Until you delete it or uninstall the extension; never sent to us
Display settings, glossary, notes, translation cache, source subtitle cache, AI overviews	Only in your own browser	None	Until you uninstall the extension or clear the data; there is currently no cloud sync

Swipe the table sideways to see more

Bank card numbers and other payment account details do not pass through us. They are handled directly on Paddle's checkout. The payment page that opens the checkout (dongyouguan.com/pay.html) loads Paddle's payment script from Paddle's server (cdn.paddle.com).

3. How we use this data

Only for these things: providing translation, signing you in, taking payment, reconciliation, customer support, security and abuse prevention. Nothing else.

Before your first sign-in, the extension lists the data that will be sent to our server, and nothing is sent to our server until you actively agree. Transfer of data outside mainland China has its own separate checkbox; see section 9.

4. Who we share data with

This is the full list of recipients and what each one receives:

DeepSeek: primary translation. Receives subtitle text and the video's title, description and channel name; comment text when translating comments, video titles when translating titles, and search words when you search in Chinese; the things you send only by clicking (subtitle text for an AI overview, the lines selected for "Explain this", the terms for glossary labelling); subtitle text for investment-risk deep analysis; the area of the picture you select for region translate (one image); if you use the glossary, also the entries that match the current subtitles; and when you use AI to generate glossary terms, also the industry keywords you type.
Alibaba Cloud (Tongyi): backup translation. Receives the same content as DeepSeek (except for risk deep analysis, which does not fall back to the backup model), and is used only when the primary is down.
Resend: email delivery service, used to send sign-in codes and reminder emails before a monthly or yearly subscription renews automatically. Receives your email address and the email content (codes, or the renewal date and amount).
Paddle: payment service provider and the Merchant of Record for all our orders. Receives the email, name, country or region and other tax-related details and the payment details you enter on Paddle's checkout (card numbers are collected by Paddle's checkout and we never see them), plus the order amount and time. When you open the payment page, your browser loads Paddle's payment script from Paddle's server, so Paddle also receives your IP address and browser information. Paddle handles this data under its own privacy policy (https://www.paddle.com/legal/privacy).
Cloudflare: hosts this website and our server, and handles every request sent to our server.
The API provider you choose: only in own API key mode. Your browser sends subtitle text and video information straight to it, not through us. When you use region translate, your browser also sends the small image area you select straight to it, not through us.
Microsoft: basic translation (only after the premium quota has run out and you click "Keep going with basic translation"). Your browser sends subtitle text, video titles and descriptions, comment text, home and search result titles and Chinese search terms directly to Microsoft Translator, not through our server; we cannot see or store them. Microsoft handles them under its own privacy terms.
Google: when you sign in with Google, and after you choose basic translation (Microsoft first; Google when Microsoft is unavailable, or for search terms that contain quotes). For sign-in, Google verifies who you are, and we ask it only for the openid and email scopes, which gives us your email address and Google account ID so we can recognise you. We do not take your contacts, Drive files or any other data. Also, after you click "Allow analytics" on this website, your browser sends website visit statistics to Google Analytics (see section 12); nothing is sent if you don't.

Apart from this, we disclose data only when the law requires it or to protect security.

5. What we do not do

We do not sell your data.
We do not show ads and do not do personalized recommendations.
We do not track behavior inside the extension. We do not record where you click, scroll or what you type.
Website analytics are off by default and start only after you click "Allow analytics"; the statistics are not linked to a DongYouGuan account and are not used for advertising.
The text and translations of subtitles, comments, list titles and search words are not linked to your account; glossary entries are not stored against your account either.
Basic translation does not go through our server, so we cannot see that content.

6. How long we keep data

Usage records (including video ID): kept for 90 days, then only monthly totals are kept.
Count records of risk deep analysis for free accounts (account, video ID, number of runs, result status): kept for at most 90 days.
Order records: kept if you have ever paid, for reconciliation, chargebacks and tax. Kept for 10 years (Article 29 of the Implementing Rules of the PRC Tax Collection and Administration Law requires tax-related records to be kept for 10 years; counted from the end of the accounting year in which the payment was made, so a payment made in 2026 is kept at least until the end of 2036 and deleted by early January 2038 at the latest; for a payment that was refunded or charged back, counted from the end of the year of the refund or chargeback); still kept after you delete your account: the records no longer hold your email, but they keep payment-provider IDs such as Paddle transaction and customer IDs, for tax reconciliation, refunds and chargebacks, and the payment provider can trace these IDs back to the payer.
Hash of the Paddle customer ID (Paddle tells customers apart by payment email): used only to stop invite rewards (the inviter's reward days and the friend's bonus days) being claimed twice: if the same payment email has paid on another account, the reward is not granted and any days already credited are taken back. Retention: kept together with the payment records for 10 years, counted from the end of the accounting year of the last payment under that customer ID, then deleted. After you delete your account, the same applies.
One-way value computed from your email: used only to recognise the same email, so that invite rewards and the discount can tell whether it is the same person (including “+” alias forms and deleted accounts). Kept while the account exists and for another 365 days after deletion, then deleted.
Invite relationships and reward ledger: kept while your account exists. After you delete your account, your invite code and the invite in which you were the invitee are deleted; the rest of the reward ledger and the invites you made are moved to a placeholder ID that holds no email and kept together with the payment records.
Device ID: reported at every sign-in and used only to match invites and to tell whether invite rewards and invite discounts are going to several accounts on the same computer. Kept for about 12 months (counted from last use), also after you delete your account.
IP addresses in server access logs: kept for 30 days.
Website visit statistics (only after you click "Allow analytics"): Google keeps the detailed data that can be tied to the visitor ID for 2 months, then only aggregated reports without it; the _ga cookie in your browser expires 60 days after your last visit.
Subtitles, comments, titles, search words and translations: not stored against your account.
Email and account ID: kept while your account exists; deleted within 30 days after you delete the account.
Sign-in: stays active for 90 days.

7. Data stored on your device

Your display settings, notes, translation cache, source subtitle cache and AI overviews live only in your own browser and are not uploaded. The full glossary is also kept on your device; when translating, only the entries that match the current subtitles are sent with the request (see the table above). In own API key mode, your API key is stored only in this computer's browser and is never sent to us. There is currently no cloud sync, so this local data does not follow you to a new computer automatically; the glossary can be exported as CSV in Settings, and notes can be copied as text from the side panel. Your membership and quota follow your account, so they are there when you sign in on another computer.

8. Your rights

You can view the data stored on your device; the glossary and notes can be exported or copied.
You can withdraw your consent at any time: delete your account in Settings, or email us. If you switch to your own API key, the extension stops sending your translation content to our servers; to have us delete the account data we have already stored, delete your account or email us. Withdrawal does not affect processing that has already taken place.
You can delete your account with one click in the account section of Settings, or by emailing the address above; we complete email requests within 15 business days. What deletion does is listed below.
To ask what we hold about you, email the address above.
Website analytics: you can switch to "Reject" at any time with "Analytics settings" in the website footer; the _ga cookies in your browser are then deleted and nothing more is sent. Withdrawal does not affect statistics already collected.

What happens when you delete your account:

It takes effect as soon as you confirm: you are signed out on all devices at once, the account is deactivated, and automatic renewal is cancelled on the spot.
Any remaining membership days and invite days are forfeited. Deleting the account is not itself a refund; if you want a refund, apply for it under the Refund Policy first.
Your email is removed from the account on the spot, and any Google sign-in link is removed on the spot. Within 30 days, we delete your account and usage records.
Payment records are kept for 10 years (Article 29 of the Implementing Rules of the PRC Tax Collection and Administration Law; counted from the end of the accounting year in which the payment was made), for tax reconciliation, refunds and chargebacks. The records no longer hold your email, but they keep payment-provider IDs such as Paddle transaction and customer IDs, and Paddle can trace these IDs back to the payer. The hash of the Paddle customer ID is kept together with the payment records.
Paddle, as the payment service provider and Merchant of Record, keeps transaction records under its own legal obligations; you can also ask Paddle directly to delete data.
Your invite code is deleted, and so is the invite in which you were the invitee. Your reward-day ledger (days earned by inviting others, bonus days you received as an invitee, redemptions and expiries), the invites you made, entries in other people's reward ledgers that refer to you, and your membership records (including memberships redeemed from invite days) are kept, moved to a placeholder ID that holds no email, without affecting days the other person already received.
You can sign up again with the same email right away and get a brand-new empty account. To tell whether an invite reward is going to the same person, we keep a keyed one-way value computed from your email for 365 days, then delete it.
The device ID (reported at every sign-in and used only to match invites and to tell whether invite rewards and invite discounts are going to several accounts on the same computer) is kept for about 12 months (counted from last use).
Settings, glossary, notes and translation cache stored in your own browser are not on our server, so deletion does not remove them. Uninstalling the extension removes them all; you can also clear the translation cache under Settings → Advanced → Cache, and delete notes one by one in the side panel.
Deletion cannot be undone.

Read the Refund Policy

9. Data sent outside mainland China

DongYouGuan's operator is based in mainland China, but our server and several of our providers are outside it, so your data leaves mainland China when you use hosted translation. This is how it travels:

The content to be translated, such as subtitle text and the video's title and description, goes first from your browser to the Cloudflare server we rent. Cloudflare is a US company, and the request is received and processed at one of its locations outside mainland China (the United States and elsewhere).
Our server then passes the content to DeepSeek in mainland China for translation, or to Alibaba Cloud Tongyi (also a mainland China company) when the primary is down. The translation comes back to the Cloudflare server and is then sent to you. In other words, this content leaves mainland China and then comes back; it is not stored on the way through Cloudflare (the shared cache is currently off, see section 2).
Account, email, usage and order data is kept in Cloudflare's D1 database, which is outside mainland China.
Payments go through Paddle, sign-in code and renewal reminder emails through Resend, and Google sign-in through Google; these providers are outside mainland China too.
Basic translation (only after the premium quota has run out and you click "Keep going with basic translation") is sent by your device directly to Microsoft and Google; the sender is your browser, not our server. You can choose not to click the button and see only the original text once the quota has run out.
When you browse this website, your browser sends visit statistics directly to Google Analytics only after you click "Allow analytics" (see section 12); nothing is sent if you don't.

Under Article 39 of the Personal Information Protection Law of the People's Republic of China, here is each overseas recipient's name, country or region, contact method, the purpose and method of processing, and the categories of personal information:

Cloudflare, Inc. (United States, 101 Townsend St, San Francisco, CA 94107): hosts this website and our server. Purpose: receiving and forwarding requests to our server, and storing account, usage and order data. Method: transmission and storage, processed on our instructions. Categories: sign-in email, account ID, device ID, usage records, order records, the hash of the Paddle customer ID, the one-way value computed from your email, invite relationships and reward ledger, IP address, and the subtitle text, video information and region-translate images that pass through with translation and region-translate requests (not stored). Contact: privacyquestions@cloudflare.com; Data Protection Officer: dpo@cloudflare.com.
Paddle.com Market Limited (United Kingdom, 30 Old Bailey, London EC4M 7AU) and its affiliates (Paddle.com Inc., United States; Paddle Payments Limited, Ireland; Paddle.com Canada Ltd, Canada): payment service provider and the Merchant of Record for all our orders, the legal seller. Purpose: completing payment, issuing receipts, reconciliation, refunds and chargebacks. Method: transmission and storage. Categories: what you enter on Paddle's checkout (email, name, country or region and similar tax details, and payment details we never see), the order amount and time, and the IP address and browser information sent when the payment page loads Paddle's payment script; Paddle handles them under its own privacy policy (https://www.paddle.com/legal/privacy). Contact: privacy@paddle.com.
Google LLC (United States, 1600 Amphitheatre Parkway, Mountain View, CA 94043): when you sign in with Google; after you choose basic translation (Microsoft first; Google when Microsoft is unavailable, or for search terms that contain quotes); and after you click "Allow analytics" on this website. Purpose: verifying who you are at sign-in; translating the text you send for basic translation; for website analytics, measuring how the website is used and improving its pages. Method: at sign-in, Google completes the check and passes the result to us; for basic translation, your browser sends the text straight to Google Translate, not through our server, and we neither receive nor store it (see section 4); for website analytics, your browser sends the data straight to Google Analytics and we view aggregated reports there. Categories: at sign-in, your Google account email and Google account ID (see section 4 for the exact fields); for basic translation, the subtitle text, video titles and descriptions, comment text, home and search result titles and Chinese search terms sent after you click "Keep going with basic translation"; for website analytics, the visit data listed in section 12. Contact: Google's privacy contact page, https://support.google.com/policies?p=privpol_privts.
Microsoft Corporation (United States, One Microsoft Way, Redmond, WA 98052): only if you click "Keep going with basic translation". Purpose: translating the text you send. Method: your browser sends it straight to Microsoft Translator, not through our server, and we neither receive nor store it (see section 4). Categories: subtitle text, video titles and descriptions, comment text, home and search result titles, Chinese search terms. Contact: Microsoft's privacy page, https://privacy.microsoft.com/.
Plus Five Five, Inc. (provides email delivery under the Resend brand; United States, 2261 Market Street #5039, San Francisco, CA 94114): sends sign-in code and renewal reminder emails. Purpose: sending codes, and reminders before a monthly or yearly subscription renews automatically. Method: transmission. Categories: your email address and the email content (codes, or the renewal date and amount). Contact: support@resend.com.

Conditions for the transfer and your consent. We send personal information outside mainland China under Article 5 of the Provisions on Promoting and Regulating Cross-Border Data Flows. Passing payment-related information to Paddle is a cross-border payment necessary to conclude and perform the purchase contract to which you are a party (Article 5, paragraph 1, item 1). For the other overseas recipients, such as Cloudflare, the number of individuals (extension users and website visitors combined) whose personal information we send abroad, counted from 1 January of the current year, is currently under 100,000 (excluding sensitive personal information), which falls under Article 5, paragraph 1, item 4. In both cases the transfer is exempt from the security assessment, the standard contract and certification. Before the count gets close to 100,000, we will sign the standard contract or obtain certification as required, and update this policy. Separately, as required by Article 39 of the Personal Information Protection Law, we ask for your separate consent: when you first sign in to hosted translation, the extension shows two checkboxes, both unticked: one to agree to the data notice, the Terms of Service and this policy, and a separate one asking whether you agree to the data above being transferred outside mainland China for processing. You can sign in only after ticking both. If you do not agree to the transfer, you cannot use hosted translation, but you can use own API key mode instead, in which your browser sends data straight to the provider you choose and not through our server. We send personal information overseas only as far as needed to provide the service. Website analytics are a separate matter, unrelated to the extension: the separate consent for them is the "Allow analytics" button on the bar at the bottom of the web page; nothing is sent if you don't click it, and rejecting does not affect browsing the site or using the extension (see section 12).

You can exercise your rights to access, copy, correct and delete with each overseas recipient using the contact details above, or email support@dongyouguan.com and we will pass the request on and help.

10. Children

DongYouGuan is not directed at users under 14, and we do not knowingly collect their personal information. The personal information of a minor under 14 is sensitive personal information: processing it requires a guardian's consent and a dedicated set of processing rules (Articles 28 and 31 of the PRC Personal Information Protection Law). We have not put these in place, so we do not accept users under 14 to create an account or use the hosted translation service. If a guardian finds that a child has given us personal information without consent, email support@dongyouguan.com and, once verified, we will suspend the account and delete the related personal information. For minors aged 14 and over, we likewise process their personal information only as far as needed to provide the service.

11. Security

Data is sent over HTTPS. Each request carries a sign-in token, and the token is stored on your own device. Data kept on the server is stored encrypted: account, usage and order data live in a Cloudflare D1 database, and all data in D1 (including metadata) is encrypted at rest with AES-256 (GCM mode); server logs are kept by Cloudflare, which states that all of its logs are encrypted at rest.

12. This website itself

This website is made of static pages. It uses no advertising cookies and loads no third-party fonts.

Visit statistics are off by default. The first time you open a page, a bar appears at the bottom. Only if you click "Allow analytics" do we load Google Analytics 4 to see how the site is used. If you click "Reject", or don't click at all, it is not loaded and your browser sends nothing to Google. You can change your mind at any time with "Analytics settings" in the footer; your choice is remembered only in this browser. The payment and payment-result pages never load analytics.

If you allow it, we collect the page address, the site you came from, browser and device type, approximate region, visit time and how long you stay on the page, and a random visitor ID stored in a cookie whose name starts with _ga (it expires 60 days after your last visit). Google uses your IP address to work out an approximate location. We do not collect your name or email, do not link this data to a DongYouGuan account, do not use it for advertising, and have not turned on Google's ad personalization or Google signals features.

This data goes to Google LLC (United States, 1600 Amphitheatre Parkway, Mountain View, CA 94043) to measure site traffic and improve our pages; your browser sends it straight to Google Analytics, on servers outside mainland China (and, if you are in Europe, outside the EEA). See Google's privacy contact page at https://support.google.com/policies?p=privpol_privts. You can exercise your rights with Google there, or email support@dongyouguan.com and we will pass your request on. Clicking "Allow analytics" is your separate consent to this transfer; withdrawing it does not affect processing already carried out. Google keeps the detailed data that can be tied to the visitor ID for 2 months, then only aggregated reports.

Other third-party resources: only the payment page (pay.html) loads Paddle's payment script from Paddle's server to open the checkout, and Paddle's checkout may use its own cookies under Paddle's privacy policy. The home page asks our server for the current prices, the payment result page checks the payment status, and the invite page checks whether an invite code is valid; like any other request, these keep the IP address for 30 days (section 6). The site is hosted on Cloudflare, which as the host may keep ordinary access logs.

13. Chrome Web Store "Limited Use" statement

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

In more detail:

DongYouGuan uses user data only to provide and improve one purpose: making YouTube readable in Chinese (translating subtitles, titles, descriptions, comments and search queries, plus supporting tools such as the full transcript, AI overviews, region translate and investment-risk alerts that help people understand the current video). Subtitle text is sent only to the model providers needed to complete the translation (DeepSeek, Alibaba Cloud; if you choose basic translation, your browser sends it directly to Microsoft or Google translation services, not through us); image areas for region translate are sent only to DeepSeek and Alibaba Cloud, and our server neither stores them nor writes them to logs; when the user uses their own API key, the browser sends the image area directly to the provider the user configured, not through us. Email and order information is sent only to the providers needed to complete sign-in and payment (the email delivery service Resend and the payment provider Paddle). We do not sell user data, do not use it for personalized ads or remarketing, do not use it for credit assessment, and do not transfer it to data brokers. Unless the user agrees (for example, when a user asks support to look into a problem), it is required for security or by law, or the data has been aggregated and made anonymous, our staff do not read users' subtitle text or translations.

14. Changes to this policy and notice

If the policy changes, we update the "Last updated" date at the top of this page. For bigger changes we tell you in the extension or by email. Continuing to use the service means you accept the updated policy. But where a change involves a new kind of data, a new purpose or a new recipient, the extension asks for your consent again, and nothing is handled in the new way before you agree.