Privacy
Cuekards is a teleprompter that runs entirely in your browser. You don't need to create a user account, and our servers do not store any of your recordings.
- The only thing of yours we fetch is the Google Doc of your script.
- If you input a Google Docs link, our system fetches the text from Google and loads it in your script box. We don't store it.
- Paste your script instead and it never leaves this browser.
- Pasted text goes straight into the prompter in this tab. No request carries it anywhere.
- Your audio, your video and the recognised speech never leave.
- Speech recognition runs in your browser, on your machine. The recording is written to private storage in this browser and then to the folder you choose.
- The one large download is the speech model (optional).
- Follow-my-voice feature needs a recogniser, which is installed once and reusaable in later takes. Everything else works without it.
The web version is free: no account needed, no watermark, no limit on how many takes you record or how long they are. Voice recognition runs on your machine.
Cookies
Cuekards sets one cookie: Google Analytics' _ga, on these pages only, so that a second visit counts as the same reader rather than a new one. In the EU and UK we ask before setting it and set nothing unless you say yes. The prompter itself sets no cookie at all, and nothing you write, say or record is in this one.
Analytics
We use Google Analytics on this site — not in the prompter — to count visits and see which pages get read. In the EU and UK nothing is measured until you accept. Google's advertising features are turned off and stay off. It never sees your script, your audio or your video, because none of those are on these pages.
Crash reports in the Android app
The Android app can send a report when it crashes, and it is off until you switch on Send crash reports in its Settings. A report goes to Google's Firebase Crashlytics and says where in the app's code it stopped, with your phone's model, Android version, free memory and storage, and a random install ID. It never includes your script, your audio, your video or the words the app heard. Crashlytics keeps reports for 90 days. Switching it off stops them and deletes any not yet sent. The prompter in your browser has no crash reporter at all.
Google Drive in the Android app
The Android app can load a script straight from your Google Drive, and it doesn't touch your Drive until you press Choose from Google Drive. The first time, Google asks whether cuekards may see the files you choose, and may ask which account to use first. That permission is Google's drive.file scope, and it is as narrow as it sounds: the app can open only the Docs you choose in Google's picker, never the rest of your Drive. It asks for no other permission.
The picker is Google's own, shown from a page on cuekards.com that the app opens in a browser tab. The app hands that page a short-lived key from Google in the part of the address that never reaches our server, and the page clears it from the tab's history. The page loads Google's picker, gives it the key, and hands the app back the ID of the Doc you chose and nothing else from your Drive. It has no analytics and sets no cookie of ours, and it is the one page on this site that loads Google's code for anything other than the analytics above.
The app then reads the Doc's text and title from Google's Drive API, with your own permission, and reads them again when you press Refresh. The text is used to show you your script and follow your voice through it, and the title to name your takes, which go only where you send them. The text stays on your phone. The app keeps the Doc's link, as it keeps a pasted one, so the script is waiting when you come back, and your permission is kept by Google Play services, not by the app. Nothing the app reads from your Drive is sent to cuekards.com or anyone else, sold, or used for advertising.
To take the permission back, press Disconnect under Settings → PRIVACY → Google Drive in the app, or remove cuekards from the third-party connections in your Google Account. A Doc shared with anyone with the link still loads from its link after that, and choosing from Drive again asks for your permission again. The prompter in your browser never connects to Google Drive.
The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.
Other third parties
Cuekards doesn't share, sell or send your data to any other company. Two exceptions are yours to make, both in the Android app: crash reports, if you switch them on, go to Google's Firebase Crashlytics, and if you connect Google Drive, the app reads the Docs you choose from Google, as above. Otherwise the app only ever talks to cuekards.com: to download the speech recogniser and its model for follow-my-voice, and to fetch a Google Doc when you give it a link. The link is the only thing of yours any of those requests carry, and none of them carry your audio or your video.
What's stored, and where
Your settings — font, words-per-minute, voice, keybindings — live in this browser's local storage, or in a URL you choose to share. They're never sent to a server. The last script you loaded, or the Google Doc link it came from, is kept in the same place so it's waiting when you come back. Press Clear and it's removed, and a pasted script is never included when you export your settings to a file. Recordings are yours: a take is written to this browser's private storage while it records, then to disk where you choose, and never kept by cuekards. The speech model stays in this browser once you've downloaded it, so you only download it once. The only other thing kept here is the analytics cookie above, and your answer to the question that set it.
Your rights
Apart from the analytics above, and crash reports if you switched them on in the Android app, nothing personal is collected or stored outside your own browser, so there is almost nothing on a server to request, correct or delete. Clearing your browser's site data for cuekards removes everything it has ever kept locally on your behalf, the analytics cookie included, and resets the choice that set it. Switching crash reports off deletes any the app has not sent, and Crashlytics deletes the ones it has after 90 days. Access to Google Drive, if you gave the Android app any, is yours to take back at any time, with Disconnect in its Settings or from your Google Account.
Changes to this policy
If this changes — most likely if a feature that talks to a server is added — this page will be updated.
Contact
Email me at alex@halfborg.com. It reaches one person, and I read all of it.