Privacy policy

Account data. If you create an account, we store your name, email address, plan and account settings. Accounts run on Supabase Auth with an email and password.

Saved styles and settings. If you save brand styles or caption settings to your account, they are stored in Supabase and in Cloudflare R2 storage so they load on your next visit.

Anonymous usage statistics. We count things like how many videos were captioned and which languages were used. These numbers are not linked to your identity and do not include your content.

Cookies and local storage. Used for sign-in sessions, your preferences and, if enabled, analytics and advertising. The cookie policy lists them in detail.

Basic technical logs. Our hosting provider (Vercel) records standard technical data such as IP address and browser type as part of serving any website. We do not use these logs to profile you.

Your video and audio. When you drop a video into the studio, the video file is read from your device and never leaves it. By default, the studio extracts a compressed audio track (Opus/OGG or WAV) and sends only that audio to a transcription provider, Cloudflare Workers AI, Google Gemini or Groq, where it is processed in memory and deleted immediately after transcription. The audio is never written to disk and never stored; only the transcript comes back to your browser.

On-device mode. On capable devices (WebGPU, 8 GB+ memory) you can opt in to on-device processing. In that mode everything stays on your device, nothing is sent anywhere at all.

Usage metering. Daily limits are enforced with hashes: an HMAC of an anonymous cookie id and of your IP address. We never store raw IP addresses, never the audio and never the contents of your transcript.

We use the data described above to:

• provide the service, accounts, sign-in, saved styles and settings;
• keep the service secure and prevent abuse;
• understand aggregate usage so we know what to improve;
• answer messages you send us.

We do not sell your data, and we do not use it to build advertising profiles of you.

A small number of providers process data on our behalf:

• Supabase, authentication and the account database.
• Cloudflare, storage and content delivery, and transcription for the optional paid “Boost accuracy” mode.
• Groq and Google Gemini, transcription providers for the free and paid server-side workflow. They receive only compressed audio, process it to produce captions, and the audio is deleted right after processing, never stored.
• Lemon Squeezy, payment processing for the paid plans. Lemon Squeezy handles your payment details; card numbers never touch our servers.
• Resend, transactional and newsletter email delivery, for the addresses you give us for that purpose.
• Vercel, hosting the site.
• Google, only if Google Analytics or Google AdSense is enabled on the site.

The paid “Boost accuracy” mode (Pro and Studio) is an explicit opt-in that runs Whisper large-v3 on our servers, capped at 30 min/day on Pro and 120 min/day on Studio. It uses your monthly caption minutes and is always clearly labeled in the product; the free studio workflow never requires it.

Account data is kept while your account is active. If you delete your account (or ask us to), the account data is removed. Anonymous usage statistics are kept only in aggregate form. Technical logs are kept by our hosting provider for its standard retention period.

You can ask to see the personal data we hold about you, correct it, or have it deleted. Email s.owaisaliavengers@gmail.com from your account email and we will respond within a reasonable time. Deleting your account removes the account data; your videos were never stored in the first place.

Sign-in is handled by Supabase Auth over encrypted connections, traffic to the site is served over HTTPS, and we store as little as possible, no videos, no audio, no captions on our side. No system is perfectly secure, but the design keeps the most sensitive content (your footage) out of the picture entirely.

OneDrop is not intended for children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, email us and we will remove it.

Our providers may process data in countries other than yours, including the United States. Each provider applies its own contractual and technical safeguards for that processing. The video file never leaves your device; compressed audio is sent to the transcription provider over TLS and deleted immediately after processing.

If this policy changes, the "Last updated" date at the top changes and material changes will be flagged on the site. If a change affects what we collect or why, we will describe the change in plain language.

Privacy questions or requests: s.owaisaliavengers@gmail.com. One person reads every message.