Voice Generator — Privacy Policy

Last updated: 29 April 2026 · Effective immediately

Voice Generator ("we", "us") is a browser extension that converts text into speech. We respect your privacy and only collect the data we need to operate the service. We're based in the EU and comply with the GDPR.

1. Data we collect

• Account data: email address, hashed password (handled entirely by Supabase Auth), and optional Google account identifier if you sign in with Google.
• Generation data: the text you submit, the voice/speed/pitch parameters, and the resulting MP3. These are stored privately against your account.
• Anti-abuse identifiers: a device fingerprint (canvas + GPU + screen + timezone hashed with SHA-256) and a salted SHA-256 hash of your IP address. Raw IP and raw fingerprint inputs are never stored.
• Billing data: handled by Stripe. We store only the Stripe customer/subscription IDs and your current plan; we never see card numbers.

2. How we use it

• Authenticate you and keep you signed in.
• Synthesise the audio you request and let you re-download it from your history.
• Enforce free-tier weekly quotas (the device + IP hashes prevent quota cycling via burner accounts on the same device).
• Process subscription payments through Stripe.

3. Data we do not collect

• Browsing history outside the extension popup.
• Page content from any website you visit.
• Telemetry, ads, or third-party trackers.

4. Third-party processors

• Supabase — auth, database, audio storage. Privacy.
• Stripe — payments. Privacy.
• Microsoft Edge TTS — speech synthesis backend (text is sent over a TLS websocket; Microsoft does not receive your account info).
• Netlify — hosts our APIs and landing pages.

5. Retention

Generations are kept while your account is active and for 30 days after deletion. The free-tier usage pool resets every ISO week. Webhook event logs are kept for 90 days.

6. Your rights (GDPR)

You can request access, correction, export, or deletion of your data at any time by emailing leonardodimitrov51@gmail.com. Account deletion in the extension wipes your profile and generations within 30 days.

7. Cookies

The extension stores its session token in chrome.storage.local, not cookies. The landing pages set no cookies; Stripe's checkout redirect is the only context where cookies appear, and they're governed by Stripe's policy.

8. Contact

Voice Generator — leonardodimitrov51@gmail.com