Privacy information for universities

1. Summary

Stillscript converts audio and video recordings to text in the web browser. Speech recognition runs entirely on the user's device. Recordings and transcripts stay on that device.

2. What happens on the device

• Transcription: The recording is read in the browser and converted to text there by a speech recognition model.
• Storage: Transcripts, and the recording if the user keeps it, are stored in the browser's storage (IndexedDB) on the device. Settings are stored in the browser's local storage.
• Editing and export: Corrections, de-identification, summaries and all exports (text, Word, subtitles, formats for analysis software, backup file) run on the device. Exported files are saved wherever the browser stores downloads.
• Optional features: Speaker separation, summaries and key statements also run on the device.

3. Which connections exist

These are all the connections the website and the app make:

• Loading the website (stillscript.com, hosted by Cloudflare, Inc., USA). This processes technically necessary data such as the IP address, time, requested address and browser details. Cloudflare also asks the browser to send a short technical report to Cloudflare when a connection fails (Network Error Logging). It contains the requested address and the type of error, no content from the app.
• One-time model download from Hugging Face Inc., USA (huggingface.co and its download servers). Hugging Face receives the IP address as well as browser details and the time. The download contains no recordings and no text. The models are then stored on the device. They are downloaded again only if files are missing, for example after clearing site data or the first time an optional feature is used.
• Pro key check (Pro only): The entered key is sent to the payment provider Polar (api.polar.sh) when it is entered and then at most once a day when the app opens. Only the key and an identifier for Stillscript are sent.
• Buying Pro (only when someone buys): The purchase takes place on Polar's checkout page. Stillscript itself does not receive payment details.
• Cancellation form (only on the cancellation page): The email address entered is sent to stillscript.com so the cancellation can be processed.
• Feedback (only if someone submits the "What's missing?" field in the app): The typed text and an optional email address are sent to stillscript.com and from there to us as an email. No recordings, no transcripts.

Network Error Logging reports go to a.nel.cloudflare.com. The Content Security Policy limits the site's connections to the destinations listed above; anyone can inspect it in the browser.

4. What does not happen

• No transfer of audio recordings or transcripts, including to Stillscript.
• No account, no sign-in, no email address needed.
• No advertising services, no tracking cookies, no analysis of the content. The only cookie is the local minute counter for the free plan. To see how many people visit the site, we only use aggregated access statistics from Cloudflare, without an additional script (see privacy policy).

5. Where the data is stored and how to delete it

All content is stored in the browser's storage on the device. Individual transcripts are deleted in the app with “Delete.” To remove everything, including the downloaded models, clear the site data for stillscript.com in the browser settings. Deleted transcripts cannot be recovered without a backup, because no copy exists on a server.

6. Verify it yourself

1. Wi-Fi test: Transcribe a short recording so the model is downloaded. Then turn off Wi-Fi or the network and transcribe another recording. This shows transcription does not need an internet connection. To see which requests the site makes, use the Network tab (next item).
2. Network tab: In Chrome or Edge, press F12 to open the developer tools, choose the “Network” tab and transcribe a recording. No requests containing audio or text appear during transcription. At most you will see requests to huggingface.co while model files are still missing.

7. Notes for researchers

• Participants' consent to recording and processing is always required.
• Names and other identifying details can be replaced with placeholders across the entire transcript in the app.
• We recommend working with recordings and transcripts only on encrypted devices and storing backups where your data management plan specifies.
• Stillscript is not certified under any standard. This information is not legal advice. Whether Stillscript may be used for a project is decided by your institution's data protection office and, where applicable, your IRB or ethics committee.

8. Contact

We are happy to answer questions: [email protected]. The full privacy policy and legal notice are on the website.