Voxtyper

Privacy Policy

Last updated: November 10, 2026

Short version. We do not store your audio recordings. We do not store the text that Voxtyper transcribes for you. The only personal data we keep on our servers is what we need to recognize you between sessions (your email if you sign in, which we may also use once to thank you and ask whether you would rate Voxtyper), enforce your monthly free quota and prevent abuse (an anonymous device identifier, a count of seconds dictated, and your IP address), and process payment if you subscribe (handled by Stripe). The full text of this policy explains each of these in detail.

1. Who we are

Voxtyper ("Voxtyper", "we", "us", or "our") is a browser extension that converts speech into properly-punctuated text in web text fields. This Privacy Policy describes how we collect, use, and protect information when you use the Voxtyper browser extension and the website at voxtyper.app (together, the "Service"). By using the Service you agree to the practices described here. If you do not agree, do not use the Service.

2. What we collect

2.1 Account information (only if you sign in)

If you choose to sign in, we store the email address you provided. If you signed in via Google, we also receive your verified email from Google as part of the OAuth flow; we do not request or store your Google profile photo, your contacts, or any other Google data. We do not store passwords because we never ask for one - all sign-in is via emailed magic-link or Google OAuth.

2.2 Anonymous device identifier

When the extension is installed, it generates a random identifier (a UUID) and stores it locally in your browser. This identifier is sent with each request to our backend so we can count how many seconds of dictation a given browser has used against the monthly free quota. It is not derived from any personal information, is not a browser fingerprint, and cannot be used to identify you across other websites or services. We also note which kind of operating system your browser runs on (for example Windows, macOS or ChromeOS, never its version), when the extension starts and with each dictation, read from the information your browser already sends to every website, so we know which computers to build Voxtyper for next.

2.3 Usage metadata

For each dictation request, our backend records the date and time, the device identifier or user identifier responsible, the duration in seconds, the upstream transcription provider used, the round-trip latency, the IP address the request came from and the approximate location (city and country) and time zone our network provider derives from it, the browser used (Chrome, Edge or Firefox) and its operating system, and the Voxtyper version (on Firefox, only while the setting described in section 2.7 is on). We record this information for quota accounting, for operational monitoring (detecting outages and provider failures), for abuse prevention, and, if you sign in, to time the one email described in section 2.8. In particular, the IP address lets us enforce per-IP rate limits that block abusive traffic before it can degrade performance - which keeps the Service fast and reliable for everyone. We do not record the content of the audio or the transcribed text.

2.4 Billing data

If you upgrade to the Unlimited plan, payment is processed by Stripe. We store the Stripe customer identifier and the current subscription status returned by Stripe (active, canceled, renewal date) so we can show this information to you and grant the appropriate plan. We do not see, receive, or store your credit card number, billing address, or any other payment instrument data. Stripe's own privacy practices apply to payment processing; see stripe.com/privacy.

2.5 Session cookie

If you sign in, we set a single HTTP-only session cookie on our backend domain so we can recognize you on subsequent requests. This cookie contains a random session token only; it is not used for tracking and we do not share it with any third party. It expires automatically after 30 days of inactivity, or immediately when you sign out.

2.6 Uninstall page and optional survey

When you remove the extension, your browser opens a short page on our site. We record that the uninstall happened, together with the device identifier, IP address, and browser described above. That page offers an optional survey. If you answer it, we store your answer: the reason you picked and anything you choose to type, such as the website where Voxtyper did not work. Answering is entirely optional, and we use the answers only to understand and fix problems. Please do not type personal information into the survey.

2.7 Setup steps

To see where new users get stuck, the extension reports a few setup steps once each: for example, that it was installed, that the microphone was allowed or blocked, or that the first dictation was typed into a text box. Each step carries the device identifier, browser, and IP address described above. It never includes the address of the page you are on or anything you said. On Firefox, you can turn these reports off in the install dialog, or later in Firefox's add-on settings under Permissions and data.

2.8 A one-time email (only if you sign in)

If you sign in and use Voxtyper regularly, we may send you one email, once, thanking you and asking whether you would rate Voxtyper on your browser's add-on store. We choose who gets it by how much they have used Voxtyper, never by what they think of it, and we never offer anything in return for a rating. It is a single message, not a mailing list, so you are never added to anything. So that it arrives at a reasonable moment, we time it by when you usually use Voxtyper and the time zone your dictations come from. If you would rather not receive it, email us at support@voxtyper.app and we will make sure it is never sent to you. We keep a copy of the email we send, so we know who we have already asked and never ask twice.

2.9 Feedback you choose to send

If you send feedback from Voxtyper's settings page, we keep what you write, the choice you picked (if any), your device identifier, your account email if you are signed in (so we can reply), your browser, and the Voxtyper version. Andrew reads it to fix problems and improve Voxtyper, and gets a copy by email through Resend. We never publish it. If you choose to post your words as a store review, you do that yourself on the store's site.

3. What we do NOT collect or retain

Your audio is never stored. When you dictate, the audio is sent to our backend, forwarded once to a transcription provider, and immediately discarded after the transcript is returned. We do not write your audio to disk, do not back it up, and have no copy of it after the request completes.

Your transcribed text is never stored. The text produced by transcription is returned to your browser and inserted into the text field you focused. Our backend does not log it, does not save it, and does not look at it. We do not have a record of what you have dictated.

In addition, we do not collect:

4. How a dictation request flows

So that you have a complete picture of what happens with your voice, here is the full path of a single dictation:

We choose transcription providers on the basis of accuracy, latency, and stated privacy practices. The providers we use process audio only for the duration of the request and do not, per their terms, use it to train their models. Provider terms are linked in Section 5.

5. Third-party services

We use a small number of third-party services to run Voxtyper. Each is named here along with a link to that service's own privacy policy:

6. Data retention

7. Your rights

You can:

If you are in the European Economic Area, the United Kingdom, or California, you have additional rights under the GDPR, the UK GDPR, and the CCPA respectively, including the right to lodge a complaint with your local data protection authority.

8. Microphone permission

Voxtyper requires microphone access from your browser to function. The microphone is accessed only during an active dictation - it is not opened on page load, is not opened on installation, and is closed the moment you stop or cancel a recording. You can revoke microphone permission at any time through your browser settings; Voxtyper will simply stop being able to record until you re-grant it.

9. Children

Voxtyper is not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at support@voxtyper.app and we will delete it.

10. Security

All traffic between your browser and our backend is encrypted with TLS. The session cookie used to recognize signed-in users is HTTP-only and marked Secure. Our backend runs on Cloudflare Workers and Cloudflare D1, which apply industry-standard physical and operational security controls. No system is perfectly secure, but the design of the Service intentionally minimizes the surface of sensitive data we hold: we cannot lose audio or transcripts we never stored in the first place.

11. International data transfer

Voxtyper's backend runs on Cloudflare's global edge network, which routes requests to the nearest available data center. This may include data centers in the United States, the European Union, or other regions. By using the Service you consent to this routing.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes that meaningfully affect how we handle your data, we will notify signed-in users by email and update the "Last updated" date at the top of this page. Continued use of the Service after a change constitutes acceptance.

13. Contact

For any privacy questions, data-access or deletion requests, or other inquiries: support@voxtyper.app.