DongYouGuanPrivacy Policy
This policy explains three things: what data DongYouGuan collects from you, who we pass it to, and how long we keep it. It applies to the DongYouGuan Chrome extension (Chrome Web Store name: 懂油管 - 中文字幕翻译 for YouTube™) and to this website.
1. Who we are
Operator: Allen Fong (individual developer; FANG AILUN is the same person, legal name as on passport), who receives Stripe payments personally. The merchant name on your card, Alipay or WeChat Pay statement may be FANG AILUN or the statement descriptor we set in Stripe; for card payments made through Paddle, the statement shows PADDLE.NET*.
For privacy questions, email:
support@dongyouguan.com2. What we collect
The table below goes row by row: what the data is, where it goes, who processes it and how long it stays. If it is not in the table, we do not collect it. Rows marked "sent automatically" are sent without you clicking anything when you use hosted translation; rows marked "sent only when you click" or "sent on a keyboard shortcut" are sent only when you take that action. The three rows marked "own API key mode" apply only when you use your own API key.
| Data | Where it goes | Who processes it | How long it is kept |
|---|---|---|---|
| Sent automatically: subtitle text of the current video, and the video's title, description, channel name and chapter names | Our server (Cloudflare Workers) | DeepSeek (primary) and Alibaba Cloud Tongyi (backup), to translate | Not stored against your account. The shared cache is currently off; when it is turned on, it will be keyed by a hash of the request content only, with no account, kept for at most 30 days, and this policy will be updated first |
| Sent automatically: the text of comments to be translated (comment translation is on by default; only the comment body is sent, not the commenter's name; turn off "Translate comments" in the popup to stop) | Same as above | Same as above | Not stored against your account |
| Sent automatically: video titles in the home page and search results (title translation is on by default; turn off "Translate home and search titles" in the popup to stop) | Same as above | Same as above | Not stored against your account |
| Sent on a keyboard shortcut: your Chinese search words (when you press ⌘+Enter or Ctrl+Enter in the YouTube search box) | Same as above | Same as above | Not stored against your account |
| Sent only when you click: when you generate an AI overview, the video's subtitle text with its title, description and channel name | Same as above | Same as above | Not stored against your account; the overview itself is kept only on your device |
| Sent only when you click: when you use "Explain this" on selected text, the passage you selected, a few subtitle lines around it and the video title | Same as above | Same as above | Not stored against your account |
| Sent only when you click: when you ask AI to label uncategorised terms in the glossary, the terms that have no category yet (source and translation) | Same as above | Same as above | Not stored against your account |
| Sent only when you click: when you use region translate, the small area of the video picture you select, compressed into one image (longest side at most 1280 pixels) | Same as above | DeepSeek (primary) and Alibaba Cloud Tongyi (backup), to read the text in the image and translate it | Our server does not store the image, does not write it to logs and does not put it in the shared cache. Like other requests, the usage record notes the token count and time, marked as region translate; no video ID is recorded |
| Deep analysis for investment risk hints: the video's subtitle text (numbered sentences) with its title, description and channel name. Free accounts send it only when they click "Deep analysis"; members get it automatically; turn off "Investment risk hints" in Settings to stop | Same as above | DeepSeek (this feature does not fall back to the backup model) | Subtitles are not stored against your account. Free accounts also have a count record (account, video ID, number of runs, result status), kept for at most 90 days |
| Pinned translations: entries that match the current subtitles when translating; and the industry keywords you type when you use AI to generate pinned terms | Sent with the translation request to our server, then to the model provider; the full list of pinned translations is also kept on your own device | DeepSeek (primary) and Alibaba Cloud Tongyi (backup) | Not stored against your account; the industry keywords are not stored |
| Video ID (sent in the request body of translation and similar requests, not in the URL or headers) | Our server | Us, to count quota and handle refunds, not to analyse what you watch | Stored with usage records for 90 days, then only monthly totals are kept |
| When you sign in with Google: your email and Google account ID (we ask Google only for the openid and email scopes) | From Google to our server | Google verifies who you are; we store the email and account ID | While your account exists; deleted within 30 days after you delete the account |
| Sign-in email and account ID | Our server | Email delivery service: Resend, to send sign-in codes | While your account exists; deleted within 30 days after you delete the account |
| Random device ID generated at install | Our server | Us, to stop repeated claims of the free bonus; when you install through an invite link, the device ID is used to match the invite and to stop the invite reward from being claimed twice | About 12 months after last use (device ID); also kept for about 12 months after you delete your account |
| Usage records: account, video ID, minutes translated, time, which kind of feature | Our server | Us | 90 days, then only monthly totals are kept; deleted within 30 days after you delete the account |
| Order records: amount, time, plan type, status returned by the payment provider | Our server, Stripe | Stripe (Paddle as backup), both payment service providers | Kept if you have ever paid, for reconciliation, chargebacks and tax, for 7 years under Hong Kong's Inland Revenue Ordinance; still kept after you delete your account: the records no longer hold your email, but they keep payment-provider IDs such as Stripe or Paddle order and customer IDs, for tax reconciliation, refunds and chargebacks, and the payment provider can trace these IDs back to the payer |
| Hashes of payment-method fingerprints and the Stripe customer ID: the card, Alipay and WeChat Pay payment fingerprints Stripe gives us at payment, and the Stripe customer ID, stored only as a keyed one-way value, from which the card or account cannot be worked out | Our server | Us, only to tell whether two accounts are the same person when granting invite rewards (the inviter's reward days and the friend's bonus days), to stop repeat claims | Kept together with the payment records for 7 years, counted from the last payment made with that payment method, then deleted; the same applies after you delete your account |
| A value computed from your email (normalised first, for example to lower case and without any “+” alias part) with a keyed one-way function. The email cannot be worked out from it, but the same email always gives the same value | Our server | Us, only to recognise the same email: the same email (including “+” alias forms) gets the new-user bonus only once; signing up again with it within one year of account deletion does not get the new-user bonus; and when granting invite rewards and the invite discount the new account is treated as the same person as the deleted one | Created at sign-up and kept while the account exists; kept for another 365 days after deletion, then deleted |
| Invite relationships and reward ledger: invite codes, who invited whom and when it was bound, and the ledger of reward days (including the matching Stripe payment ID). The person who invited you can see in the extension your masked email (only the first and last letters and the full domain), when you were bound, when you first paid, and the reward status | Our server | Us, to grant and check invite rewards | While your account exists; after you delete the account, your invite code and the invite in which you were the invitee are deleted; your reward-day ledger (days earned by inviting others, bonus days you received as an invitee, redemptions and expiries), the invites you made, entries in other people's reward ledgers that refer to you, and your membership records (including memberships redeemed from invite days) are kept, moved to a placeholder ID that holds no email, without affecting days the other person already received |
| Sign-in token | Stored only in your own browser; sent to our server in a request header with each request to confirm it is you | Us | A sign-in stays active for 90 days. We do not have your password |
| IP address in server access logs | Our server, Cloudflare | Cloudflare. We only use it for loose rate limiting and do not use it to infer your location | 30 days |
| Own API key mode: subtitle text and video information | Sent directly to the endpoint address you enter yourself, not through our server; we cannot see it | The provider you choose | We do not store it. How that provider handles it is governed by your terms with them |
| Own API key mode: the small image area you select with region translate | Sent by your browser directly to the endpoint address you enter yourself, not through our server; we cannot see it | The provider you configure | We do not store it. How that provider handles it is governed by your terms with them |
| Own API key mode: your API key | Stored only in your own browser | None | Until you delete it or uninstall the extension; never sent to us |
| Display settings, pinned translations, notes, translation cache, source subtitle cache, AI overviews | Only in your own browser | None | Until you uninstall the extension or clear the data; there is currently no cloud sync |
Swipe the table sideways to see more
Bank card numbers and Alipay or WeChat accounts do not pass through us. They are handled directly on Stripe's checkout page (or Paddle's, when the backup provider is in use).
3. How we use this data
Only for these things: providing translation, signing you in, taking payment, reconciliation, customer support, security and abuse prevention. Nothing else.
Before your first sign-in, the extension lists the data that will be sent to our server, and nothing is sent to our server until you actively agree.
4. Who we share data with
This is the full list of recipients and what each one receives:
- DeepSeek: primary translation. Receives subtitle text and the video's title, description and channel name; comment text when translating comments, video titles when translating titles, and search words when you search in Chinese; the things you send only by clicking (subtitle text for an AI overview, the lines selected for "Explain this", the terms for glossary labelling); subtitle text for investment-risk deep analysis; the area of the picture you select for region translate (one image); if you set pinned translations, also the entries that match the current subtitles; and when you use AI to generate pinned terms, also the industry keywords you type.
- Alibaba Cloud (Tongyi): backup translation. Receives the same content as DeepSeek (except for risk deep analysis, which does not fall back to the backup model), and is used only when the primary is down.
- Resend: email delivery service, used to send sign-in codes. Receives your email address and the email content (codes).
- Stripe: payment service provider, the main one. Receives the email you give at checkout and the order amount and time. Card numbers are collected by Stripe's checkout page and we never see them.
- Paddle: payment service provider, backup, used only when Stripe is unavailable. Receives the email, name, country or region and other tax-related details you enter on Paddle's checkout, plus the order amount and time. Paddle acts as Merchant of Record and handles this data under its own privacy policy (https://www.paddle.com/legal/privacy).
- Cloudflare: hosts this website and our server, and handles every request sent to our server.
- The API provider you choose: only in own API key mode. Your browser sends subtitle text and video information straight to it, not through us. When you use region translate, your browser also sends the small image area you select straight to it, not through us.
- Google: only if you choose to sign in with Google. Google verifies who you are, and we ask it only for the openid and email scopes, which gives us your email address and Google account ID so we can recognise you. We do not take your contacts, Drive files or any other data.
Apart from this, we disclose data only when the law requires it or to protect security.
5. What we do not do
- We do not sell your data.
- We do not show ads and do not do personalized recommendations.
- We do not track behavior inside the extension. We do not record where you click, scroll or what you type.
- The text and translations of subtitles, comments, list titles and search words are not linked to your account; pinned-translation entries are not stored against your account either.
6. How long we keep data
- Usage records (including video ID): kept for 90 days, then only monthly totals are kept.
- Count records of risk deep analysis for free accounts (account, video ID, number of runs, result status): kept for at most 90 days.
- Order records: kept if you have ever paid, for reconciliation, chargebacks and tax. Kept for 7 years under Hong Kong's Inland Revenue Ordinance; still kept after you delete your account: the records no longer hold your email, but they keep payment-provider IDs such as Stripe or Paddle order and customer IDs, for tax reconciliation, refunds and chargebacks, and the payment provider can trace these IDs back to the payer.
- Hashes of payment-method fingerprints and the Stripe customer ID: used only to stop invite rewards (the inviter's reward days and the friend's bonus days) being claimed twice. Retention: kept together with the payment records for 7 years, counted from the last payment made with that payment method, then deleted. After you delete your account, the same applies.
- One-way value computed from your email: used only to recognise the same email, so that the same email (including “+” alias forms) gets the new-user bonus only once, signing up again within one year of deletion does not get it, and invite rewards and the discount can tell whether it is the same person. Kept while the account exists and for another 365 days after deletion, then deleted.
- Invite relationships and reward ledger: kept while your account exists. After you delete your account, your invite code and the invite in which you were the invitee are deleted; the rest of the reward ledger and the invites you made are moved to a placeholder ID that holds no email and kept together with the payment records.
- Device ID: used only to stop repeated claims of the free bonus and to match invites. Kept for about 12 months (counted from last use), also after you delete your account.
- IP addresses in server access logs: kept for 30 days.
- Subtitles, comments, titles, search words and translations: not stored against your account.
- Email and account ID: kept while your account exists; deleted within 30 days after you delete the account.
- Sign-in: stays active for 90 days.
7. Data stored on your device
Your display settings, notes, translation cache, source subtitle cache and AI overviews live only in your own browser and are not uploaded. The full list of pinned translations is also kept on your device; when translating, only the entries that match the current subtitles are sent with the request (see the table above). In own API key mode, your API key is stored only in this computer's browser and is never sent to us. There is currently no cloud sync, so this local data does not follow you to a new computer automatically; Settings lets you export them. Your membership and quota follow your account, so they are there when you sign in on another computer.
8. Your rights
- You can view and export the data stored on your device.
- You can delete your account with one click in the account section of Settings, or by emailing the address above; we complete email requests within 15 business days. What deletion does is listed below.
- To ask what we hold about you, email the address above.
What happens when you delete your account:
- It takes effect as soon as you confirm: you are signed out on all devices at once, the account is deactivated, and automatic renewal is cancelled on the spot.
- Any remaining membership days and invite days are forfeited. Deleting the account is not itself a refund; if you want a refund, apply for it under the Refund Policy first.
- Your email is removed from the account on the spot, and any Google sign-in link is removed on the spot. Within 30 days, we delete your account and usage records.
- Payment records are kept for 7 years under Hong Kong's Inland Revenue Ordinance, for tax reconciliation, refunds and chargebacks. The records no longer hold your email, but they keep payment-provider IDs such as Stripe or Paddle order and customer IDs, and the payment provider can trace these IDs back to the payer. Hashes of payment-method fingerprints and the Stripe customer ID are kept together with the payment records.
- Stripe and Paddle, as payment service providers, keep transaction records under their own legal obligations; you can also ask them directly to delete data.
- Your invite code is deleted, and so is the invite in which you were the invitee. Your reward-day ledger (days earned by inviting others, bonus days you received as an invitee, redemptions and expiries), the invites you made, entries in other people's reward ledgers that refer to you, and your membership records (including memberships redeemed from invite days) are kept, moved to a placeholder ID that holds no email, without affecting days the other person already received.
- You can sign up again with the same email right away and get a brand-new empty account, but signing up again within one year does not get the new-user bonus. For this we keep a keyed one-way value computed from your email for 365 days, then delete it.
- The device ID we use against abuse is kept for about 12 months (counted from last use).
- Settings, pinned translations, notes and translation cache stored in your own browser are not on our server, so deletion does not remove them. Uninstalling the extension removes them all; you can also clear the translation cache under Settings → Advanced → Cache, and delete notes one by one in the side panel.
- Deletion cannot be undone.
9. Data is sent outside mainland China
Your data is sent to servers and providers outside mainland China for processing: Cloudflare, which hosts our server, Stripe and Paddle, which take payment, and Resend, which sends email, are all outside mainland China. DeepSeek and Alibaba Cloud are mainland China companies; exactly where the servers that process subtitle text and region-translate images are located is set out in each provider's own documentation.
Under Article 39 of the Personal Information Protection Law of the People's Republic of China, here is each overseas recipient's name and contact method, the purpose and method of processing, and the categories of personal information:
- Cloudflare, Inc. (United States): hosts this website and our server. Purpose: receiving and forwarding requests to our server, and storing account, usage and order data. Method: transmission and storage, processed on our instructions. Categories: sign-in email, account ID, device ID, usage records, order records, hashes of payment-method fingerprints and the Stripe customer ID, the one-way value computed from your email, invite relationships and reward ledger, IP address, and the subtitle text, video information and region-translate images that pass through with translation and region-translate requests (not stored). Contact: the privacy contact channel published on cloudflare.com.
- Stripe (Stripe, Inc. and its affiliates): payment. Purpose: completing payment, reconciliation, refunds and chargebacks. Method: transmission and storage. Categories: the email you give at checkout, order amount and time, and the payment details you enter directly on Stripe's checkout page (we never see card numbers). Contact: the privacy contact channel published on stripe.com.
- Paddle: backup payment service provider, used only when Stripe is unavailable. Purpose: completing payment, reconciliation, refunds and chargebacks. Method: transmission and storage. Categories: what you enter on Paddle's checkout (email, name, country or region and similar tax details) and the order amount and time; Paddle acts as Merchant of Record and handles them under its own privacy policy. Contact: the privacy contact channel published on paddle.com.
- Google LLC (United States): only if you choose to sign in with Google. Purpose: verifying who you are. Method: Google completes the sign-in check and passes the result to us. Categories: your Google account email and Google account ID (see section 4 for the exact fields). Contact: the privacy contact channel published on google.com.
- Resend: sends sign-in code emails. Purpose: sending codes. Method: transmission. Categories: your email address and the email content (codes). Contact: the privacy contact channel published on resend.com.
We send personal information overseas only as far as needed to provide the service. Before your first sign-in, the extension lists the data that will be sent, and nothing is sent until you actively tick the consent box. You can exercise your rights to access, copy, correct and delete with the recipients above, or email support@dongyouguan.com and we will pass the request on and help.
10. Children
DongYouGuan is not directed at children under 14, and we do not knowingly collect their data. If you are under 14, use it only with the consent and guidance of a parent or other guardian. If a guardian finds that a child has given us personal information without consent, email support@dongyouguan.com and we will delete it once verified.
11. Security
Data is sent over HTTPS. Each request carries a sign-in token, and the token is stored on your own device. Data kept on the server is stored encrypted: account, usage and order data live in a Cloudflare D1 database, and all data in D1 (including metadata) is encrypted at rest with AES-256 (GCM mode); server logs are kept by Cloudflare, which states that all of its logs are encrypted at rest.
12. This website itself
This website is made of static pages. It uses no analytics scripts, no advertising or tracking cookies, and loads no third-party fonts or external resources. The site is hosted on Cloudflare, which as the host may keep ordinary access logs.
13. Chrome Web Store "Limited Use" statement
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
In more detail:
DongYouGuan uses user data only to provide and improve one function: translating YouTube video subtitles into Chinese to help people watch. Subtitle text is sent only to the model providers needed to complete the translation (DeepSeek, Alibaba Cloud); image areas for region translate are likewise sent only to these two providers, and our server neither stores them nor writes them to logs; when the user uses their own API key, the browser sends the image area directly to the provider the user configured, not through us. Email and order information is sent only to the providers needed to complete sign-in and payment (the email delivery service Resend, Stripe, and Paddle when Stripe is unavailable). We do not sell user data, do not use it for personalized ads or remarketing, do not use it for credit assessment, and do not transfer it to data brokers. Unless the user agrees (for example, when a user asks support to look into a problem), it is required for security or by law, or the data has been aggregated and made anonymous, our staff do not read users' subtitle text or translations.
14. Changes to this policy and notice
If the policy changes, we update the "Last updated" date at the top of this page. For bigger changes we tell you in the extension or by email. Continuing to use the service means you accept the updated policy.