A daily thought
The extension includes a verified collection of historical quotations and our translations. Before you create a device account by starting a trial, adding a VIP code or buying VIP, the daily quotation rotates locally without a network request.
After a device account exists, opening the extension interface may retrieve the shared daily selection through our existing public configuration endpoint, at most once per UTC day. This request contains no device credentials, subtitle text or viewing activity; the server receives the network information normally sent with a web request. If the request fails, a local quotation is shown. The selected date and quotation ID are cached on this device.
Once per day, our server may ask DeepSeek to select an ID from the verified collection. Only the date and candidate quotations are sent, never your account or activity. The model does not write or alter the quotations displayed in the extension.
Who we are
Dual Subtitles & Shadowing for Netflix (the “extension”) and its membership service at echo.dooo5.com are operated by Dooo5, an individual developer (“we”). This policy covers the extension, the membership service and these web pages. Send privacy questions to privacy@dooo5.com.
Free features without an account
Bilingual subtitles — choosing tracks, styling, dragging and timing offset — run entirely in your browser. The extension reads the subtitle tracks Netflix already delivers to your browser and does not upload them.
Until you start a trial or add a VIP code, bilingual subtitles send no data to our servers. After that, watching with bilingual subtitles alone still sends nothing during a trial, apart from the remaining-time check described below; with an active VIP, Netflix playback pages confirm membership status as described below. Your preferences, and the title identifiers used to remember per-title settings, are stored only in your browser’s extension storage.
Daily trial and anonymous device accounts
VIP features can be tried free for 15 minutes once a day, without signing up. The 15 minutes run continuously from the moment you click Start trial: pausing, switching tabs or closing the page does not stop the clock. You can start once per local day, counted by your time zone.
The first time you start a trial, the extension creates a device key in your browser and our service creates an anonymous device account with no name or email address: a random account ID, the public-key fingerprint of the device key, a device name such as ‘Chrome · Windows’, the creation time and the time of last use, plus session records.
Each time you start a trial, the extension sends the start request and your time zone offset. We keep only your most recent trial window — its start and end time and the local day it counts for — together with your time zone offset, which can change at most once in 24 hours; the start of each trial is also noted in the account audit log described below. We do not receive what you watch or for how long, titles, playback addresses or subtitles, and no viewing history is collected.
To prevent abuse, we limit new device accounts, trial starts by new accounts and trial lookups per network using keyed digests of your IP address (for IPv6, of its /64 and /48 networks). If a device unlinks after starting that day’s trial, new trials from its network are paused until that trial’s next start time, so clearing data does not reset the daily trial. These digests are pseudonymous data, not anonymous data. We keep them only as per-network counters and daily totals that are not linked to your account, and delete them after about two to three days. Device accounts without an active VIP are deleted automatically after 30 days without use if they never started a trial or held a code, or after 90 days otherwise.
VIP codes and devices
There is no account sign-in — no email, password or third-party login. A VIP code is the only credential for VIP: we store only a keyed digest of each code, never the code itself. When you add a code, it is linked to the device account on your device; codes stack, and each period starts when the code is added.
One VIP can register up to two devices, and one device can use VIP features at a time. To restore on a new computer or after reinstalling, enter the same code there. If two devices are already registered, the least recently used one is replaced only after you confirm, and each VIP allows 3 replacements per 365 days. Replacement records — the time and the replaced device — are kept for about 400 days.
The extension keeps the code you entered in its private storage in your browser so you can view or copy it in Membership; unlinking the device deletes it. The device key’s private key cannot be exported through normal browser interfaces. The server keeps the public key fingerprint, the device name, session records and usage counters to protect VIP against sharing and abuse. We do not collect hardware fingerprints.
Membership status checks
With an active VIP, the extension confirms membership and device status with our membership service about every 10 seconds on a Netflix playback page, and whenever that page regains focus; membership details are confirmed about every 5 minutes. During a trial, the 15-minute clock runs in your browser and the extension contacts the service for practice only when you start the trial, look up text or hear a pronunciation, and — while your window is still running — once after each restart of the extension’s background (for example when you reopen Netflix after closing it) to confirm the remaining time against our server clock. These requests carry only signed session and device credentials and the data described here — not subtitles, video titles, playback addresses or Netflix cookies.
Member features
Sentence replay, previous and next sentence, end-of-sentence pause, loops, slow replay and shortcuts run in your browser once your VIP or daily trial is confirmed.
When you choose to look up text, the text you selected and the source and target languages are sent to our service, which forwards them to DeepSeek to produce explanations and translations. When you choose to hear a pronunciation, the selected text and its language are sent to our service, which forwards them to Microsoft Azure Speech to generate audio. We do not send unselected subtitle lines, the video title, the playback address or Netflix cookies. You can turn online lookup off in the extension settings.
We count requests and characters per account and day to apply fair-use limits; trial lookups have their own smaller limit for each trial. Our service does not store the text of lookup or pronunciation requests, and keeps no application cache of results or generated audio.
Payments
Online purchase is not open yet, so we currently collect no payment information. Once it opens, purchases will be processed by Paddle.com as our reseller and Merchant of Record under its own privacy notice. We will pass only an internal device-account reference to Paddle, and receive order, subscription and refund status, related identifiers, the amount, the currency and the billing email address, which we will use only to email you your VIP code once, without keeping it. We will never receive your full card number.
Who we share data with
- DeepSeek — the text you select for lookup, with language settings.
- Microsoft Azure Speech — the text you select for pronunciation, with its language.
- Paddle.com — once online purchase opens: an internal device-account reference when you buy; Paddle processes payment details and the billing email as Merchant of Record.
- Zoho Mail — hosts our support and privacy mailboxes; messages you send us are stored there.
The membership service runs on a server managed by the operator. We do not sell personal data, use it for advertising or share it with data brokers. The extension contains no advertising or analytics code. We disclose information to others only when required by law, to protect against fraud or abuse, or as part of a merger, acquisition or sale of assets after obtaining your explicit prior consent.
Operator access
Dooo5 can view and manage device accounts through a restricted administration tool — for example, to look up an account by VIP code or account ID, grant or revoke VIP, remove devices, reset device replacements or manage VIP codes — to provide support, handle refunds and prevent abuse. Only the operator has access. These operator actions are recorded in the account audit log described below.
How long we keep data
- Device account, devices, VIP, VIP code digests and usage counters: while the account exists. An account with an active VIP is never deleted automatically, so its code can always restore it. An account that held a code keeps a minimal de-identified record after deletion so the same code cannot be redeemed twice.
- Access tokens expire after 15 minutes and refresh tokens after at most 30 days.
- Rate-limit records, which use keyed digests of IP addresses rather than the addresses themselves: normally removed within about two days.
- Trial: the most recent trial window and your time zone offset, while the account exists. Per-network digests and totals for trial limits: about two to three days. Trial lookup counts: 31 days. Device replacement records: about 400 days. Device accounts without an active VIP: deleted after 30 days without use (no trial and no code) or 90 days.
- Account audit log: security events for your account — device sign-ins with the device concerned, a device being added with a VIP code, replaced, unlinked or removed, moving VIP use to another device, reuse of an old session token, VIP code redemption, starting a trial, changing the trial time zone and membership billing status changes — together with operator actions. It contains no IP addresses, subtitles or lookup text. Entries are kept for up to 365 days; when an account is deleted, its entries are removed at once, apart from a record that the account was deleted, which is also removed after 365 days.
- Purchase, subscription and refund records (once online purchase opens): as long as needed for accounting, tax, refunds and disputes. Paddle keeps its own records under its privacy notice.
- Encrypted daily backups: the most recent seven are kept by default, so deleted data leaves the backups as older copies rotate out. If we ever have to restore a backup, the membership service stays closed while we re-apply the deletions and revocations made after it, based on the records we still have, and every device has to add its VIP code again. If you notice that data you deleted has reappeared, contact us and we will delete it again.
- Emails you send us: as long as needed to handle your request.
Our email and AI providers may keep operational records under their own policies. We keep no access logs for the extension’s service paths or these pages; server error logs may contain technical data such as IP addresses and are rotated regularly.
Security
Data travels over HTTPS. Identifying fields such as device names are encrypted on the server, and tokens and VIP codes are stored only as protected digests. Access to the server, database and backups is restricted, and backups are encrypted with a separate key.
Your choices and rights
In Membership, “Unlink this device and clear its data” frees the device slot, deletes this device’s records on our server and clears the device key, cache and saved VIP code in your browser. If the account then has no device and no active VIP, it is deleted too. You can also export this device account’s data there.
While a VIP is active, its account is kept so the code can restore it. To delete a whole VIP at once, write to privacy@dooo5.com with your purchase record or VIP code; we verify it and delete the data. Minimal de-identified records needed to prevent repeated code redemption and to keep transaction records consistent may remain.
Preferences stored in your browser are separate from the membership service. You can back them up or reset them in the extension settings; unlinking does not erase them.
You can also ask us to access, correct or delete your information by writing to privacy@dooo5.com. We reply within 3 business days.
Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. In practice:
- We use user data only to provide and improve the extension’s single purpose — bilingual Netflix subtitles and sentence-by-sentence language practice — including the trial and VIP features described above.
- We transfer user data only as needed to provide those features (to the service providers listed above), to comply with applicable law, to protect against malware, spam, phishing or other fraud or abuse, or as part of a merger, acquisition or sale of assets after obtaining your explicit prior consent.
- We never use or transfer user data for advertising, including personalised advertising; never sell it to data brokers or information resellers; and never use it to determine creditworthiness or for lending.
- We do not allow people to read user data unless you give explicit consent for specific data (for example, when you ask for support), it is necessary for security purposes such as investigating abuse, it is required by law, or the data is aggregated and anonymised for internal operations.
Changes to this policy
We will announce material changes on this page and in the extension.
Contact
Operator: Dooo5 (individual developer)
Support: support@dooo5.com
Privacy: privacy@dooo5.com