OxydOpen the editor

Privacy.

There is no server and no account. The audio, the words and the project stay in this browser on this device, because there is nowhere to upload them to. This page lists every request the app can make, and what it keeps.

Every request

This site's own files
The pages, scripts, styles and fonts, from this origin only. After the first visit they are kept for offline use, and the service worker's version is checked on each visit so that a new build is offered, never forced.
The Audacity reader
About 1 MB, from this site, the first time an Audacity project is opened; kept after that, so later opens need no connection.
The transcript model
About 110 MB for English, and about 80 MB more for Any language, from this site, after the first Transcribe says what it will download. Kept in the browser's private storage; Projects lists each model kept and removes it on request.
The demo's two recordings
From this site, when the demo is played, once the demo ships.
Links to vayce.app
"Powered by Vayce" at the foot of each page, and a Vayce tool under Where next on some pages: links, followed only when pressed.
Google Tag Manager
A script from www.googletagmanager.com, on every page. It shows the cookie banner, applies the choice below, and loads Google Analytics. Fetching it tells Google the page's address and your browser's, as any request does.
Google Analytics
Each page sends Google which page was visited, where the visit came from, and named actions with their kind, count, size and length: a file opened as WAV, an effect added, an export finished as a 12-minute MP3, a transcript made. Google adds what it reads from the request: the browser, the type of device and an approximate location, and keeps the data for 14 months. Never sent: the audio, the words of a transcript, a file's, track's or project's name, or the project's address.
With Accept, or without
After Accept, Google Analytics sets two cookies, _ga and _ga_YZ6J06Q2GM, kept for up to two years, so that visits from this browser are counted as one visitor's. Before you answer, and after Decline, the same requests go without any cookie or stored identifier (Google's consent mode): each page is counted on its own, and Google estimates from them how many visitors declined.
Cloudflare's error reports
The site is served by Cloudflare, whose Network Error Logging asks the browser to tell it when a request to this site fails: the address asked for, the kind of error, and when. Only failures are reported, never a request that worked, and never the audio, the words or the project. The browser sends it to a.nel.cloudflare.com, and may not send it at all.

The cookie choice

Accept lets Google Analytics keep its cookies; Decline keeps it to requests without them, and turning it off later removes the cookies. The choice is kept in this browser and asked again only when what can be allowed changes.

What is kept on this device

Projects and their audio, in the browser's private storage: about 1.4 GB per hour of stereo audio. Presets and FX chains, under their names. The theme, the last export settings, and the last project opened. Projects shows what is stored and removes any of it.

What is never sent

The audio, the words of a transcript, and the names of files, tracks and projects: no request carries them. The page's Content-Security-Policy lets scripts and requests go to this site and to Google's Tag Manager and Analytics hosts, and refuses any other origin; styles, fonts and workers come from this site only.