Privacy Policy

Last Updated: May 3, 2026

PageNarrator ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect when you visit pagenarrator.com or use the PageNarrator browser extension, how we use it, who we share it with, and the rights you have over it.

For the purposes of the EU/UK General Data Protection Regulation, PageNarrator is the data controller for the limited personal data we process directly. Our payment processor (Paddle) acts as an independent controller for the payment information you provide at checkout.

1. On-Device Processing

The text on the pages you read, the selections you make, and the PDFs you open are processed entirely on your device. Article extraction, language detection, text-to-speech synthesis, and the Kokoro and Piper voice models all run inside your browser. This content is never transmitted to our servers, and we do not see it, store it, or share it.

2. Information We Collect

We deliberately collect as little as possible. The categories below cover everything we process:

• Purchase information. When you buy a Pro license, our payment processor Paddle collects your name, email address, billing country, and the payment details you enter. We receive only your email address and a transaction reference, which we store alongside the license key we issue to you.
• License key records. For each Pro purchase we store the generated 16-character license key, the customer email, the Paddle transaction ID, the creation timestamp, and an "active" flag. This record exists for the lifetime of the license and is deleted within 30 days of a refund or revocation, except where retention is required for tax or accounting purposes.
• Device verification data. When the extension checks whether your license is still valid, it sends the license key together with a randomly generated device identifier (a UUID created on first activation) to our verification endpoint. The server stores only a SHA-256 hash of that identifier (combined with the license key) and the timestamp of the most recent check. The raw device identifier never leaves your device, and we cannot reverse the hash to recover it. Up to five hashed identifiers are kept per license; older entries are evicted automatically when a sixth device activates.
• Email correspondence. If you email us at support@pagenarrator.com, we will see your email address and the contents of your message. We use these only to respond to you and keep them for as long as is reasonably necessary to handle your request.
• Server logs. Our hosting provider, Cloudflare, may automatically log technical request metadata such as IP address, user agent, and timestamps for security and abuse-prevention purposes. We do not use these logs for analytics or marketing.

We do not collect: the URLs you visit, the contents of pages or PDFs, your browsing history, voice recordings, advertising identifiers, or any special category of personal data.

3. Why We Process This Information (Lawful Basis)

• Performance of a contract — to deliver your license key, run the device-limit check, and provide Pro features.
• Legitimate interests — to detect fraud, prevent abuse of the licensing system, secure our infrastructure, and respond to support requests.
• Legal obligation — to comply with tax, accounting, and consumer-protection rules.
• Consent — where required, for example if we ever introduce optional analytics or marketing emails. You can withdraw consent at any time.

4. Cookies and Analytics

Our website does not run any first-party analytics, advertising, or tracking scripts and does not set its own cookies. The Paddle checkout flow embedded on the pricing page may set cookies that are strictly necessary to process your payment securely; those cookies are governed by Paddle's Privacy Policy. The browser extension itself does not set cookies and stores its preferences only in your browser's local extension storage.

5. Sub-Processors and Third-Party Services

We rely on a small number of trusted third parties to operate the service:

• Paddle — Merchant of Record for our checkout. Paddle processes your payment, collects applicable taxes, and provides receipts. See Paddle's privacy notice at paddle.com/legal/privacy.
• Cloudflare — hosts the website and the verification endpoint, and stores license records in Cloudflare KV. See cloudflare.com/privacypolicy.
• Resend — sends the transactional email containing your license key. Resend processes your email address solely on our instructions. See resend.com/legal/privacy-policy.

We do not sell, rent, or trade personal data to anyone, and we do not share it for advertising.

6. International Data Transfers

Our sub-processors operate globally. When personal data is transferred outside the European Economic Area or the United Kingdom, those transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, as published by each provider in their data-processing terms.

7. Data Retention

• License records and hashed device identifiers are kept for the active lifetime of your license, then deleted within 30 days of refund or revocation.
• Support emails are retained for up to 24 months from the last interaction.
• Cloudflare server logs are retained for the period set by Cloudflare's standard log policy (typically a few days).
• Paddle and Resend retain data according to their own published policies.

8. Security

All connections to our website and verification endpoint are encrypted with TLS. License records are stored in Cloudflare KV, which encrypts data at rest. Device identifiers are hashed with SHA-256 before storage so the raw values cannot be recovered from our database. We restrict administrative access to the underlying systems to authorized personnel, and we keep that group as small as possible.

9. Your Rights

Depending on where you live, you have some or all of the following rights with respect to your personal data: access, correction, deletion, restriction, portability, objection, and the right not to be subject to solely automated decision-making. Residents of the European Economic Area, the United Kingdom, and California (under the CCPA/CPRA) have additional statutory protections — for example, the right to lodge a complaint with a supervisory authority and, for California residents, the right to know which categories of personal information are collected and not to be discriminated against for exercising your rights. We do not "sell" or "share" personal information as those terms are defined under the CCPA.

To exercise any of these rights, email us at support@pagenarrator.com. We will respond within 30 days. If you are not satisfied with our response, you may contact your local data protection authority.

10. Children's Privacy

The Software is not directed at children under 16, and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page indicates when the latest changes took effect. If a change is material, we will make reasonable efforts to notify you in advance — for example, by email to the address associated with your license.

12. Contact Us

For questions, requests, or concerns about this Privacy Policy or your data, write to support@pagenarrator.com.