Privacy

What's recorded

When the host presses Record, each person's browser records their own camera, microphone and any screens they share, each as its own file. The files are saved in the browser's private storage first and uploaded while you record. Once a file is fully uploaded, the browser's copy is removed. If an upload can't finish, the copy stays in that browser until it can.

Uploaded files are stored in Cloudflare R2, with a list of the take's files, who recorded them, and any markers the host added. If the browser never comes back, Isotake finishes the file from the parts it already has.

When every file of a take is uploaded, Isotake transcribes it: each person's microphone (and any shared screen's audio) is sent on its own to xAI's Grok speech-to-text service, and the transcript, every word with its time and who said it, is stored with the take.

The call

While you're in a studio, audio and video go to the others through Cloudflare's Realtime service. It's encrypted in transit but not end-to-end encrypted: Cloudflare's servers pass the media along. Only the files your own browser records are kept; the call itself isn't saved.

Hosts and guests

• Hosts sign in with Google. We store your email address and name (from Google, and you can change the name), your studios and their settings.
• Guests don't create an account. A guest gives a display name, which is saved with the session and on their files, along with when they joined, left and agreed to be recorded.
• Before joining, guests see that joining means agreeing to be recorded.

Cookies and browser storage

A signed-in host gets one cookie that keeps them signed in for 30 days, and a short-lived one during Google sign-in. Your browser also remembers your camera, microphone and speaker choices, your name, and a token for each studio you've been in, so a reopened tab is still you. There are no ads, analytics or tracking cookies.

Who can see recordings

• The studio's host, signed in.
• Anyone the host gives a download link to. Links are signed and stop working after a day (seven days for links sent to the host's webhook).
• Tools the host connects with an API token or a webhook they set up.
• People at Anomaly who run the service, only when needed to keep it working or to help you.

Guests can't open the studio's library.

How long it's kept

Recordings are kept until the host deletes them. Deleting a take removes its files, markers and transcript. Deleting a studio removes everything in it: every take, file, transcript and the names of the people who joined. To delete your account, write to help@anoma.ly.

Like any web service, our hosting provider (Cloudflare) keeps request logs, including IP addresses, for a limited time.

Who processes it

• Cloudflare: hosting, the call, storage and the database.
• Google: sign-in for hosts.
• xAI: transcripts (each take's microphone audio is sent to it to transcribe).

Anomaly doesn't sell your data or use your recordings to train AI models.

Contact

Anomaly runs Isotake. For questions, access or deletion requests, write to help@anoma.ly.