Your recordings stay yours.

This Privacy Policy applies to the Orec website and web application at orec.live. It covers information collected when you visit the site, use the recorder, create an account, enable cloud sync, share recordings, or contact support.

Orec is designed as a browser-based audio recorder. Audio is processed and stored locally on your device by default. No audio data is sent to our servers unless you explicitly opt in to cloud features.

We collect information you provide directly and limited technical data needed to run the service. If you use Orec without an account, we collect only basic technical data.

When you record audio in Orec, everything happens inside your browser. The audio is captured via the Web Audio API, processed locally, and stored in your browser's IndexedDB. No audio data is transmitted to any server during recording, editing, or playback.

If you enable cloud sync or sharing in the future, audio will only be uploaded with your explicit action. You will always be able to use Orec in fully local mode without sending audio anywhere.

Recording is local by default. Nothing leaves your device until you click “Get Link.” When you do, the audio file uploads to Cloudflare R2 object storage and a shareable URL is created.

Here is what that means for your data:

• Your audio is stored on Cloudflare R2. R2 is Cloudflare's object storage service. Files are encrypted at rest and in transit.
• We cannot listen to your recordings. Orec stores the file and the metadata needed to serve it (duration, title, expiry). We do not access, play, analyze, or process the audio content itself.
• Anyone with the link can listen. Share links are unlisted, not private. If someone has the URL, they can play the recording. Treat links like any other file you share online.
• Free links expire after 7 days. After expiry, the audio file is deleted from Cloudflare R2. Paid accounts get permanent links.
• You can delete shared recordings at any time. Deleting a shared recording removes the file from Cloudflare R2 and breaks the link immediately.

If you never share, none of this applies. Your recordings stay in your browser and nothing is uploaded anywhere.

We use personal information for practical product and service purposes.

• Provide, maintain, and improve Orec.
• Authenticate users who create accounts.
• Enable cloud sync and sharing when you opt in.
• Debug errors, analyze product performance, and prevent abuse.
• Send product updates or notices only where allowed and with opt-out controls.
• Comply with legal obligations and enforce our terms.

We do not sell personal information. We share information only when needed to provide Orec, comply with the law, protect rights and safety, or complete a business transfer such as a merger or acquisition.

Service providers may process information for us, including:

• Cloudflare R2 for shared recording storage (only when you click Get Link).
• Supabase for authentication, database, and metadata storage (accounts and cloud sync only).
• Vercel or similar hosting providers for app hosting and delivery.
• Analytics tools for traffic and usage insights (consent-gated).
• Sentry or similar services for error monitoring and crash reporting.

If you share a recording via a link, the audio and any metadata you include will be accessible to anyone with that link.

Orec uses necessary cookies and browser storage for authentication (if you have an account), session data, and basic app preferences. IndexedDB is used to store your recordings locally.

Analytics are optional and consent-gated where required. Blocking necessary cookies or storage in your browser may break the recorder or account features.

Depending on where you live, you may have rights over your personal information. These may include the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account or request deletion of personal information.
• Export your recordings in standard audio formats at any time.
• Opt out of marketing emails.
• Object to or restrict some processing where applicable law gives you that right.

California residents may have additional rights under the CCPA. Orec does not sell personal information.

To make a request, email contact@orec.live. We may need to verify your identity before completing a request.

We use technical and organizational safeguards to protect personal information, including authentication controls and encrypted connections. Because recordings are stored locally in your browser by default, your audio data is only as secure as your device. No online service can guarantee perfect security.

We keep account information for as long as needed to provide Orec, comply with legal obligations, and resolve disputes. If you delete your account, active data is removed within a reasonable period, except where retention is required for legal or security purposes. Local recordings in your browser are not affected by account deletion.

Orec is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Questions, requests, or concerns can be sent to contact@orec.live.

We may update this policy as Orec changes. If the changes are material, we will take reasonable steps to notify you, such as updating the date above or posting a notice on the site.