Privacy Policy

Last updated: April 2026

What data we collect

Decodify collects the minimum data needed to provide the subtitle translation service:

• Action type — e.g. "create_file", "run_command" (never file contents)
• Target filename or package name — e.g. "App.tsx", "tailwindcss"
• Preferred language — "en" or "es" (stored locally in your browser)
• Anonymous daily usage count — a hashed identifier derived from your IP + browser User-Agent, used only to enforce the free tier limit. It resets daily and is never linked to your identity.

What we never collect

• File contents or source code
• Conversation history with your AI agent
• Personal information (name, email, account details)
• Precise location data
• Browsing history outside supported platforms
• Your API key (stored locally only, sent directly to Anthropic)

How we use your data

The action type and target are sent to our Cloudflare Workers API to generate a plain-language subtitle using Claude Haiku. The subtitle is cached for 24 hours to minimize repeat API calls. Your data is not used for advertising, profiling, or sold to third parties.

BYOK (Bring Your Own Key)

If you provide your own Anthropic API key, it is stored locally in your browser via chrome.storage.local. The key is sent directly to the Anthropic API as an HTTP header — it never touches our servers and we never store it.

Third-party services

• Anthropic API — receives action type + target to generate subtitles. See Anthropic's Privacy Policy.
• Upstash Redis — caches subtitle results server-side. Data retained for 24 hours maximum.
• Cloudflare — hosts the API and landing page. See Cloudflare's Privacy Policy.

Local storage

The following data is stored locally in your browser and never leaves your device:

• Language preference (chrome.storage.local)
• Daily usage counter (chrome.storage.local)
• API key if provided (chrome.storage.local)
• Translation cache (IndexedDB, 24-hour TTL)
• Panel position and state (localStorage)

Data retention

Cached translations are deleted after 24 hours. Usage counters reset daily. No long-term personal data is stored on our servers.

Children's privacy

Decodify is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

Contact

For privacy questions, email hello@decodify.dev or open an issue on GitHub.