Privacy policy

Last updated 26 September 2026.

This notice concerns quoth.dev. Contact messages and website requests are separate from dictation in the Quoth desktop app.

In short

This website sets no cookies, stores nothing in your browser, and uses no advertising, cross-site tracking or third-party scripts. Fonts and all other assets are served from this domain. We count visits and measure page speed anonymously, in aggregate. Personal data is processed only to deliver pages and, if you write to us, to answer your message. No decisions about you are made automatically.

Who is responsible

The website operator is Samuel Ruairí Bullard, an individual based in Regensburg, Germany. Contact details are provided in the legal notice. You can also use the contact form for privacy requests.

Hosting

Vercel hosts this website. Requests pass through its network, which processes technical information such as your IP address, requested URL, request time and browser information to deliver pages and protect the service. Pages are served from the location nearest to you; the contact form is processed in Vercel’s Frankfurt region. Vercel keeps request logs only as long as needed to operate and secure the service, as described in its privacy notice. The legal basis for this necessary website operation is Article 6 (1) (f) GDPR.

Visitor statistics and page speed

We use Vercel Web Analytics and Vercel Speed Insights to see which pages are read and how fast they load. Both run from this domain and use no cookies. With each page view they record the page address, referring site, country, device type, operating system and browser, and Speed Insights adds loading measurements such as how long the page took to appear and your connection type. Visits are counted with a hash of the request that is discarded after 24 hours; IP addresses are not stored, and the results are only available to us as anonymous, aggregated statistics. The purpose is to improve the site’s content and performance, based on our legitimate interest (Article 6 (1) (f) GDPR). Content blockers or your browser’s tracking protection may block these measurements, which does not affect the site.

Contact messages

The form sends your email address, optional name, selected topic, message and any attachments to the maintainer through Resend. Resend sends the message from its EU region (Ireland) but stores its records, including message logs, in the USA. The message is delivered to the maintainer’s Gmail mailbox, provided by Google, and replies are sent from it. Your details are used only to read and respond to your enquiry. Email and message are required to submit the form, since we cannot reply without them; your name and attachments are optional. Please include only information needed to answer your request.

General enquiries are handled on the basis of a legitimate interest in responding to questions and supporting the project (Article 6 (1) (f) GDPR). Where an enquiry is necessary to enter into or fulfil a contract with you, such as a sponsorship agreement, Article 6 (1) (b) GDPR applies.

Messages are deleted once your enquiry has been fully dealt with and no follow-up is expected, unless statutory retention obligations apply, for example for records of a sponsorship agreement. Resend keeps its copy of a message and its delivery logs for at most 30 days.

Protecting the contact form

To limit repeated submissions, the server keeps IP addresses and request times in memory and checks a rolling one-hour window. Expired entries are removed when a subsequent request is processed, or when the server instance ends. This is separate from hosting and mail-provider logs. The purpose is to protect the form from abuse and keep it available (Article 6 (1) (f) GDPR).

Microphone preview

The theme preview requests microphone access only when you choose “Try with your voice”. It analyzes microphone levels in your browser to animate the preview. It does not record, upload or transcribe your audio. Stopping the preview or leaving it releases microphone access.

Browser assistants

If you use a compatible browser assistant, it can read the listed installation options, change the appearance preview, or prepare a contact draft for you to review. Preparing a draft does not send it to the maintainer or Resend, and these actions do not activate the microphone. The tools return availability, the chosen appearance, or a draft status, rather than your contact form contents. Information you give your assistant is also subject to that provider’s settings and privacy policy.

Service providers and transfers

These providers process personal data for the purposes above:

Vercel, Resend and Google are based in the USA, and data is stored or may be accessed there. Such transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, under which all three are certified, and on the European Commission’s Standard Contractual Clauses in the providers’ data processing terms (Articles 45 and 46 GDPR).

The Quoth app

Quoth transcribes speech on your device. Audio and transcripts are not sent to a cloud transcription service. Speech models are downloaded during setup or when you choose another model; dictation then works offline.

Your rights

Subject to the conditions in the GDPR, you may request access, correction, deletion or restriction of your personal data, and data portability where applicable. You can object to processing based on legitimate interests for reasons arising from your particular situation. If processing is based on consent, you can withdraw it for the future.

You may complain to a data protection supervisory authority, including the authority for the private sector in Bavaria: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Postfach 1349, 91504 Ansbach, Germany. You can submit a complaint to BayLDA.