Privacy

Your recordings and transcripts

They stay on your device. TapeText downloads a speech model to your browser and runs it there; the audio file is read from your disk by the page and is never transmitted. There is no server-side processing of any kind, and there is nowhere for a recording to be stored even briefly.

This is enforced rather than merely intended. The site is served with a Content-Security-Policy of default-src 'self', which instructs your browser to refuse any connection to a host other than this one, and the speech library is configured with remote model loading disabled so that it cannot reach a third-party repository. You can confirm the result in the Network tab of your browser's developer tools, or by transcribing a file with your connection switched off once the model has been cached.

Nothing you transcribe is written to your device either. The transcript lives in the tab's memory and is gone when you close it: there is no autosave, no history and no local database. Exports are generated in the page and saved by your browser's own download, to wherever you choose.

No accounts, no cookies

There is no sign-up, so there is no account, no password and no profile. The site sets no cookies and stores no identifier on your device.

What is measured

Anonymous, aggregate usage statistics through Vercel Web Analytics: page views, and a small fixed set of events describing whether the tool was started, whether it finished, and why it failed when it did.

No content of yours is ever in an event. Not a filename, not a word of a transcript, not a speaker name. Numbers are reported as ranges rather than values. The one detail taken from your file is its extension: m4a, mov, which is a format, not a recording, and which tells us which formats to support next.

Vercel Web Analytics derives a visitor identifier by hashing the IP address and user agent of each request. That hash is pseudonymous personal data, and it is processed on our behalf, which makes us the controller for it. It is not a cookie, it is not stored on your device, and it is rotated every twenty-four hours, so it cannot follow you between sites or between days.

The legal detail for that measurement

Controller

The publisher named in the legal notice, reachable at damienyvert.dev@gmail.com.

Purpose

Aggregate audience measurement: how many people reach the site and whether the tool works for them.

Legal basis

Legitimate interest, art. 6(1)(f) GDPR: understanding whether a free tool is usable by the people who find it, with no profiling and no individual view of any visitor.

Retention

Twelve months, which is the reporting window of the plan in use. There is no archive beyond it.

Processor and transfers

Vercel Inc., which hosts the site and provides the analytics. Data may be processed in the United States. Two safeguards apply, independently of one another: Vercel is certified under the EU–U.S. Data Privacy Framework, and its Data Processing Agreement incorporates the European Commission's 2021 Standard Contractual Clauses, Module Two.

Your rights

Access, rectification, erasure, restriction, objection and portability. In practice the data is aggregate and carries no identifier we could use to find you, so an access request will truthfully return nothing attributable to you. You may also complain to a supervisory authority. In France, that is the CNPD.

Why there is no cookie banner

Because nothing is stored on or read from your device for tracking. The analytics script sets no cookie. Unlike the rules on who publishes a site, the rules on reading from a device are not governed by where the provider is established: they are applied by the authority of the country the visitor is in. The assessment below is therefore written against the strictest reading a likely visitor brings, which is French law (art. 82 of the loi Informatique et Libertés), covering reading from terminal equipment as well as writing to it. The exemption relied on is the one for audience measurement: the measurement is strictly limited to this site, produces aggregate statistics only, builds no individual profile, does not follow anyone across sites, and is not disclosed to a third party, since Vercel acts as a processor under its own data processing agreement, not as a recipient.

Vercel Web Analytics is not on the CNIL's published list of pre-approved audience-measurement solutions. That list is a shortcut, not the rule; the criteria above are the rule, and the assessment against them is written down rather than assumed.

Hosting

Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States. Contact: privacy@vercel.com. Vercel's privacy policy. Serving a page necessarily means the host sees the request, including its IP address, in its own server logs.