Privacy

How your information is handled.

Last updated September 2026. Plain language, on purpose. If anything here is unclear, that's worth telling us.

What we collect

An email address when you link an account. Before that, a signed browser session keeps a device-local archive connected to you. We also store the names and labels you enter, questions you choose or write, event details, uploaded archive header images, voice recordings, their duration, and the technical information required to receive and play them.

Where recordings live

Original recordings are stored in private Cloudflare R2 object storage. Archive playback uses temporary signed audio links. A public shared-answer page is available only through its own random capability link.

Who can access them

You, people who receive an answering link, and anyone you intentionally send a shared answer or group-contribution link to. There is no public directory and no way to browse or search other people's archives.

This isn't end-to-end encrypted. The people running this service could technically reach stored recordings through server infrastructure, as any hosted service can reach its own data. That access is used only to operate the service, but it is technically possible and should be stated plainly.

Services we rely on

Vercel hosts the application and provides anonymous, cookieless traffic analytics and performance measurements. Neon provides the Postgres database, Cloudflare R2 stores audio and uploaded archive images, and Resend delivers sign-in email. Each service handles the information required for its part of the product. We do not sell personal information.

Deleting things

Delete an answer from your archive to remove its stored recording. Event hosts can also remove individual guest answers. The archive page includes a self-service account deletion control that permanently removes the account, its archives, shared links, sign-in history, and stored recordings.

Cookies

A signed, HTTP-only session cookie recognizes which archive is yours. It can represent a device-local archive or an email-linked account. Public-site analytics are anonymous and do not use cookies. We do not use advertising cookies.

Who this is for

Built for personal and family use, not directed at children.

Changes

This page may be updated as the service changes. The date at the top reflects the most recent revision.

Questions