Last updated: September 2026
Data Controller
The controller responsible for data processing on this website is the service provider named in our Imprint. Contact: info.quicktranscribe@gmail.com
Overview: What We Process and Why
Quick Transcribe is committed to protecting your privacy. Below you can see which data we process, for what purpose, on which legal basis (GDPR), and for how long.
Uploaded audio and video files (guests and account holders)
We process the files you upload in order to transcribe them. This is necessary to provide the service you requested (Art. 6(1)(b) GDPR).
- Files are sent over an encrypted connection (HTTPS) and processed on our cloud provider Modal, acting on our behalf. They are not shared with anyone else and not used for any other purpose.
- Files are deleted immediately once processing is complete. We do not store your files or transcriptions; the transcription is only returned to your browser.
- The name of the uploaded file may appear in Modal's technical logs, which are deleted automatically after a short period (currently about one day).
Technical usage records (guests and account holders)
For each transcription request we keep a usage record: the time, type and outcome of the request, your browser's user-agent, a pseudonymized IP address and, if you are signed in, your account ID. For guests, the IP address is also checked briefly for abuse by a service provider (see "Recipients and Service Providers"); the result is cached for up to 30 days. We use this to keep the service secure, prevent abuse, apply usage limits, fix errors and confirm that charged credits were delivered (legitimate interests, Art. 6(1)(f) GDPR). You may object to this processing (see "Your Rights"). After 12 months we remove the IP address, user-agent and account ID; the remaining anonymous data is kept for statistics.
Account (optional)
Creating an account is optional - you can use Quick Transcribe as a guest without registering. If you create a free account, we store:
- Your email address (and, if you sign up with Google, the name and profile picture from your Google account)
- Your password, which is securely hashed by our authentication provider - we never see or store it in plain text
- Your credit balance and transaction history (credits granted, purchased, spent and refunded; for transcriptions this includes the file name and duration, shown in your account dashboard)
- A pseudonymized form of your IP address at sign-up, to prevent abuse of the free starting credits
The legal basis is the contract for your account (Art. 6(1)(b) GDPR); the sign-up IP check is based on our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). This data is kept for as long as your account exists. Contact us if you'd like your account and its data deleted. Records of purchases may have to be retained for up to 10 years after deletion, as required by tax and commercial law (Art. 6(1)(c) GDPR).
Purchases
Credit purchases are processed by Stripe. Your payment details are entered on Stripe's checkout page and are never seen or stored by us. We send Stripe your account ID and receive confirmation of the payment. Legal basis: performance of the purchase contract (Art. 6(1)(b) GDPR).
Bot protection
To protect sign-up and sign-in from automated abuse we use Cloudflare Turnstile. It is loaded when you visit our site, so your IP address and browser information are transmitted to Cloudflare. Legal basis: our legitimate interest in securing the service (Art. 6(1)(f) GDPR).
Hosting and analytics
The website is hosted by Vercel, which processes your IP address in server logs when you visit (Art. 6(1)(f) GDPR - our legitimate interest in delivering the site securely). We also use Vercel Web Analytics and Speed Insights to measure page views and loading performance in aggregated form. These do not use cookies or identify you across websites (Art. 6(1)(f) GDPR).
Recipients and Service Providers
We share data only with the providers below, each for the purpose stated, and only as needed for that purpose:
- Modal - cloud computing on which your files are transcribed
- Supabase - database and authentication (account, credits, usage records)
- Stripe - payment processing
- Cloudflare - Turnstile bot protection
- proxycheck.io - abuse prevention; receives the IP address of guests using the service
- Vercel - website hosting and analytics
- Google - only if you choose to sign in with Google, according to Google's own privacy policy
- Buy Me a Coffee - only if you click the donation link; the button image itself is hosted by us and loads nothing from them
Scripts used by the website (for example for login and file export) are hosted on our own server and not loaded from third parties.
Transfers Outside the EU
Some of these providers process data outside the EU/EEA, in particular in the United States. Where a provider is certified under the EU-US Data Privacy Framework, the transfer is based on the European Commission's adequacy decision; otherwise it is based on the EU Standard Contractual Clauses.
Data Security
We implement appropriate security measures including:
- Encrypted connections (HTTPS) for all data in transit
- Encryption at rest provided by our infrastructure providers for stored account data
- Limited access controls for processing systems
- Automatic deletion of uploaded files after processing
Cookies and Tracking
We do not set advertising or tracking cookies. Our analytics (Vercel Web Analytics and Speed Insights) work without cookies. Your login session is kept in your browser's local storage, which is strictly necessary for the sign-in function.
Your Rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, and to receive it in a portable format (Art. 15-20 GDPR). Where we process data based on legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). To exercise these rights, contact us at the address above.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI Baden-Württemberg, www.baden-wuerttemberg.datenschutz.de); you may also contact the authority in your own place of residence.
You are not required to provide personal data to use the service as a guest. An account requires an email address (or a Google sign-in).
Contact Us
For privacy-related questions, contact us at the email address given under "Data Controller" above.