← Back to the tool

Privacy policy

Last updated: 27 September 2026 · Applies to timecodalab.glocalwhale.com

The short version: your subtitle files are opened, edited and exported inside your own browser. They are never uploaded to us or to anyone else. There is no account, no file storage, no cookie-based tracking, and no advertising.

1. Who we are

TimecodaLab ("we", "us") is an independent software project operated by an individual developer. You can reach us at support@glocalwhale.com.

2. Files you work with

Subtitle files you drop into the tool are read into your browser's memory using JavaScript, processed there, and offered back to you as a download. No copy is sent to our servers — the tool has no upload endpoint at all. You can verify this yourself: load the page, disconnect from the internet, and keep working.

3. What we do not collect

4. Aggregate analytics

This site runs no analytics of its own. Our hosting provider, Cloudflare, automatically injects a cookie-less page counter as part of serving the site (page views, referring site, country, browser class), so we can tell which pages are useful. It sets no cookies, does not fingerprint you, cannot identify you individually, and is never linked to any file you work with. Because the host injects it rather than us, we cannot gate it on your browser's "Do Not Track" / Global Privacy Control signal — if you want it blocked, block it in your browser or with an extension, and the site keeps working normally.

5. Payments

Paid plans are sold by Creem, which acts as the merchant of record. When you buy, your payment details are provided directly to Creem and are governed by Creem's privacy policy. We receive only the minimum needed to fulfil your order (such as your email address and the fact that an order was completed). We never see your full card number.

6. Local storage on your device, and the licence check

If you activate a Pro licence, the tool stores that licence key and its activation reference in your browser's local storage (tcl.license.v1) so you do not have to type it again. It contains no personal data and can be removed at any time by clearing site data for this domain, or with the "release this device" control shown in the Pro dialog.

Verifying a licence is the only request this page ever makes. It is sent to this site's own endpoint (/api/license, served from the same domain), and it contains your licence key and nothing else — never a file, never a file name. We forward it to Creem to confirm the licence is active, and we do not log it.

7. Email you send us

If you email us, we use your message only to answer you, and keep it only while the conversation is active. Ask us to delete it and we will.

8. Third parties

Our website is hosted and served by Cloudflare, and paid orders are processed by Creem (merchant of record). Those are the only third parties involved. We embed no social trackers, no ad networks, and no external fonts. The one third-party request a normal page load makes is the page counter that Cloudflare injects as part of hosting the site — described in section 4, cookie-less and aggregate-only. Blocking it breaks nothing here.

9. Children

The service is not directed at children under 13, and we do not knowingly collect data from them.

10. Your rights

Because we hold almost no personal data, there is usually nothing to export or erase. Where we do hold something (for example an email thread, or an order record held by Creem), you can write to support@glocalwhale.com to access, correct or delete it. If you are in the EU/UK, you also have the right to complain to your local supervisory authority.

11. Changes

If this policy changes materially, we will update the date above and note what changed on this page.

12. Contact

support@glocalwhale.com — see also Contact, Terms and Refunds.