Privacy Policy — Transcriber for YouTube Chrome Extension

Single Purpose

Transcribe the YouTube video or podcast the user is viewing, then optionally summarize it with Claude or ChatGPT or send the transcript to Notion or Obsidian, all from a side panel that stays open beside the video.

Overview

The extension supports two modes: local mode (all processing on your own machine via the open-source server) and cloud mode (processing via transcribed.dev). You choose the mode in extension settings. The extension itself contains no analytics, telemetry, advertising, or tracking code.

Data We Collect

In local mode, the extension collects no data and sends no data to transcribed.dev. Audio, video URLs, transcripts, and settings stay on your machine.

In cloud mode, the following categories of data are collected:

• - Personally identifiable information — your email address, collected when you create or sign in to a transcribed.dev account via Supabase Auth.
• - Authentication information — a Supabase session cookie that keeps you signed in, and any API keys (`ytt_sk_...`) you generate in the dashboard for programmatic use.
• - Web history — the URL of the specific YouTube or podcast page you choose to transcribe is sent to transcribed.dev so the server can fetch the audio. We do not collect general browsing history; URLs are only sent when you trigger a transcription.
• - Location — your IP address is logged on the server for rate-limit enforcement (15 transcripts per IP per day) and abuse prevention. We do not derive precise location and do not use IP for advertising or profiling.
• - Website content — the transcript text produced from the audio of the video or podcast you transcribed. Stored in your transcribed.dev account so you can access it from any device.

We do not collect: health information, financial information (see Billing below), personal communications, user activity (clicks, scrolls, keystrokes), or location beyond IP address.

How Your Data Is Used

• - Email + auth — identify your account, send transactional email (sign-in links, billing receipts).
• - URLs — fetch the source audio for transcription.
• - IP — enforce per-IP rate limits and detect abuse.
• - Transcripts — delivered to you and stored in your account until you delete them.

Your data is never sold or transferred to third parties outside the subprocessors listed below, never used for purposes unrelated to the single purpose stated above, and never used to determine creditworthiness or for lending.

Neither the extension, transcribed.dev, nor the third-party transcription providers we use are permitted to use your transcripts to train AI models. This is enforced contractually with our processors.

Subprocessors

In cloud mode, the following providers process data on our behalf:

• - Vercel — hosts the transcribed.dev web app and API. Receives requests including IP addresses.
• - Supabase — Postgres database and authentication. Stores your account email, hashed password, sessions, transcripts, and usage counts.
• - Inngest — job queue. Receives transcription job metadata (URL, user ID).
• - Railway — hosts the worker that downloads audio and runs transcription.
• - Decodo — residential proxy used to fetch source audio reliably.
• - OpenRouter — routes audio to the transcription model (Gemini Flash). Bound by no-training terms.
• - Stripe — payment processor for paid plans (see Billing below).

Billing

The free plan includes 30 transcripts per month and requires no payment information. Optional paid plans (Pro $9/mo, Power $19/mo) are processed by Stripe through the transcribed.dev web app, not the extension. The extension never sees, transmits, or stores card numbers, billing addresses, or other financial information. The extension only knows which plan tier your account is on.

Destinations and Summarize Handoff

You can optionally send a finished transcript to a destination of your choice (Obsidian or Notion), or open a Summarize handoff to Claude or ChatGPT. These features are opt-in. The transcript is sent only when you trigger the action. The extension does not store third-party access tokens; cloud destinations like Notion are connected via OAuth handled server-side on transcribed.dev.

Data Stored in Your Browser

The extension uses Chrome's storage APIs to persist your preferences (mode, destination choice) and current transcription state. This data lives in your browser profile and is not transmitted anywhere except as described in the modes above.

Permissions

The extension requests Chrome permissions to read the URL of the current tab, persist settings, display its side panel, run read-only content scripts on supported sites (currently youtube.com and open.spotify.com), and — in local mode — communicate with a transcription service running on your own machine. Optional permissions for additional source platforms (Vimeo, Apple Podcasts, Twitch), the Summarize handoff (Claude, ChatGPT), notifications, downloads, clipboard, and context menus are requested only when you enable the relevant feature and can be revoked at any time in Chrome's extension settings.

What We Don't Do

• - We don't sell or transfer your data to third parties outside the subprocessors listed above.
• - We don't use or transfer your data for purposes unrelated to the single purpose stated above.
• - We don't use or transfer your data to determine creditworthiness or for lending purposes.
• - We don't use cross-site tracking cookies, pixels, or fingerprinting.
• - We don't read or transmit pages other than the supported video and podcast pages you choose to transcribe.
• - We don't access your YouTube or other source-platform account credentials.
• - We don't use your transcripts to train AI models.

Data Retention and Deletion

• - Local mode: all data lives on your machine.
• - Cloud mode: transcripts remain in your transcribed.dev account until you delete them individually from the dashboard. To delete your entire account and all associated data, email support@transcribed.dev from the address on the account; deletion is permanent and removes transcripts, usage records, and authentication data. Server logs (including IP) are retained by Vercel for up to 30 days for security and debugging.

See the transcribed.dev privacy policy for full server-side details.

Children

The extension is not intended for users under 13. We do not knowingly collect personal information from children.

Changes

If this policy changes, the updated version will be posted at the same URL with a new "Last updated" date. Material changes will be announced in extension release notes.

Contact

For privacy questions or data requests, email support@transcribed.dev.