Cookie Policy
Effective and last updated: October 15, 2026 · PullSubtitle (www.pullsubtitle.com)
This Cookie Policy explains how PullSubtitle (www.pullsubtitle.com) uses cookies and similar technologies. It should be read together with our Privacy Policy.
1. What cookies are
Cookies are small text files that a website stores in your browser. They let the site remember things between page loads, such as the fact that you are signed in. Similar technologies include browser local storage. In this Policy, "cookies" covers both.
2. Our approach
PullSubtitle uses only strictly necessary cookies. We do not use analytics cookies, advertising cookies, social-media tracking pixels or any cookies that follow you across other websites. Because strictly necessary cookies are required for the Service to work, they do not require consent under the EU ePrivacy rules, and we therefore do not show a cookie consent banner.
3. Cookies we set
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| st_session | Keeps you signed in. Contains a random token; the matching record on our server is stored only as a one-way hash. | Strictly necessary, first-party, HttpOnly, Secure | 30 days, or until you sign out |
| oauth_state | Protects Google/GitHub sign-in against cross-site request forgery. | Strictly necessary, first-party, HttpOnly, Secure | 10 minutes |
| oauth_verifier | Part of the secure (PKCE) sign-in exchange with Google. | Strictly necessary, first-party, HttpOnly, Secure | 10 minutes |
| oauth_next | Remembers which page to return you to after sign-in. | Strictly necessary, first-party, HttpOnly, Secure | 10 minutes |
4. Cookies set by our providers
| Provider | Cookie | Purpose | Duration |
|---|---|---|---|
| Cloudflare (hosting and security) | __cf_bm, cf_clearance, _cfuvid | May be set to distinguish people from bots, apply rate limits and protect the Service from attacks. They do not identify you personally. | Up to 30 minutes (__cf_bm), up to 1 year (cf_clearance), session (_cfuvid) |
| Google and GitHub (sign-in) | Set on google.com / github.com | Only when you choose to sign in with them; governed by their own cookie policies. | Set by provider |
| Waffo Pancake (checkout) | Set on the Waffo checkout domain | Only when you open checkout, to process your payment securely; governed by Waffo's own policies. | Set by provider |
We do not control cookies set on other domains. Please read the cookie policies of Google, GitHub and Cloudflare.
5. Analytics and advertising
We do not use Google Analytics or any other third-party analytics or advertising service. If that ever changes, we will update this Policy first and ask for your consent where the law requires it, with a way to manage your preferences.
6. Managing cookies
You can block or delete cookies in your browser settings. Most browsers let you refuse all cookies, refuse third-party cookies only, or delete cookies when you close the browser. If you block our strictly necessary cookies, you will not be able to sign in or use the transcript tools. Signing out of PullSubtitle removes the session cookie and ends the session on our server.
Helpful guides: Chrome, Firefox, Safari, Edge.
7. Changes and contact
We will update this Policy if the cookies we use change, and revise the date at the top of the page. Questions? Contact contact@pullsubtitle.com.