Privacy Policy

Effective date: 8 August 2026

Who we are. Verbally ("Verbally", "we", "us") is a browser extension that reads web pages aloud and displays translated captions. Verbally is a service operated by Katzir Marketing B.V., a company registered in the Netherlands (Chamber of Commerce / KvK number 42033872). We are the data controller for the personal data described in this policy. You can reach us at info.verbally@gmail.com.

What data we collect.

• Account data. When you sign in, we receive your name and email address from your Google account via Google sign-in. We use this to create and identify your Verbally account.
• Subscription data. When you subscribe, our payment processor (Stripe) creates a customer record. We store a Stripe customer reference and your subscription status (e.g. trialing, active, canceled). We never see or store your card details — those are handled entirely by Stripe.
• Usage data. We record a count of how many translation and quiz requests your account makes, so we can enforce fair-use limits. We do not store the content of the pages you read.
• Reading content (in transit only). When you have Verbally read or quiz a page, the text of that page is sent to our translation provider (OpenAI) to produce the translated captions and quiz questions. This text is processed to fulfil your request and is not stored on our servers.
• Product usage events. The extension records which of its own features you use — for example that the extension was installed, that the popup was opened, that the demo was played, or that a subscription page was viewed. These events are tied to a random identifier created on your device when you install the extension, not to your identity; if you sign in, we link that identifier to your account so we can tell how many people who install Verbally Reader go on to use it. If you visit our website with the extension installed, the same identifier is also shared with PostHog, so a session recording can be matched to an installation. We record the name of the action and, for some actions, a small detail about the action itself — such as which language you were practising, the language your browser is set to, or your score in a demo quiz. We never record the pages you visit or their content. We also send these events to Google Analytics to measure how Verbally is used; the copy sent to Google carries the random identifier, the action name and that same small detail — never your account, your name or your email address.
• Data stored only in your browser. Words you save, your dictionary, and your flashcards are stored locally in your browser (Chrome's extension storage). This data stays on your device and is not sent to us.

How we use your data. To provide the service (read pages aloud, generate captions and quizzes), to create and manage your account, to process your subscription, to enforce fair-use limits that protect the service from abuse, and to understand how Verbally is used so we can improve it (for example, seeing where new users get stuck).

Service providers we share data with. We use the following providers to run Verbally. Each receives only the data needed for its function:

• Google — sign-in (authentication), and Google Analytics, which receives traffic data from this website and anonymous product usage events from the extension (see "Cookies and tracking" below).
• PostHog — records how visitors use this website, so we can see where our own pages confuse people (see "Cookies and tracking" below). PostHog runs only on verballyreader.com and never sees the pages you browse elsewhere. We use their European hosting, so this data stays in the EU. If you have the Verbally Reader extension installed, the extension gives this website the same random install identifier described above, so we can tell which recording belongs to which installation.
• Supabase — hosts our database and backend (your account and subscription records).
• OpenAI — generates translations and quiz questions from the page text you choose to have read. OpenAI does not use data submitted through its API to train its models, and retains it only briefly for abuse monitoring.
• Stripe — payment processing and subscription billing.
• Vercel — hosts this website.

Some of these providers process data outside the European Economic Area (for example, in the United States). Where that happens, the transfer is covered by the provider's standard contractual safeguards.

Data retention. We keep your account and subscription data for as long as your account exists. If you delete your account, we delete your personal data, except where we are required to keep limited records (for example, billing records) to meet legal obligations.

Your rights. Under the GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to its processing. To exercise any of these rights, or to delete your account and data, email us at info.verbally@gmail.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Account deletion. To delete your account and associated data, email info.verbally@gmail.com and we will action your request.

Cookies and tracking. This website uses two analytics tools. Both set cookies, and both only ever see what you do on this website — never your own browsing anywhere else.

Google Analytics tells us how visitors find and use the site. It sends usage data — which of our pages you view, your approximate location, and your device and browser type — to Google on our behalf. We use this only in aggregate, to measure traffic and improve the site.

PostHog records your visit to this website as a session recording: which of our pages you open, where you click and scroll, and how your pointer moves across the page. We watch these recordings to find the places our own pages let people down — a button nobody notices, or the step where someone new gives up. PostHog also combines many visits into heatmaps. PostHog processes this for us on their European hosting, so it does not leave the European Economic Area. These pages never ask you for a password or card details — signing in happens in Google's own window, and payment on Stripe's own checkout — so a recording cannot capture either.

If you have the extension installed, we link a recording to your installation. The extension hands this website the same random install identifier it already sends us, and we pass it to PostHog. That lets us watch what actually happened for someone who got stuck, instead of guessing from numbers. It identifies an installation, not you: it carries no name, no email and no account details, and it is created on your device.

To be completely clear about what these recordings do and do not cover: they capture only what you do on verballyreader.com — our own pages. The recording itself does not run inside the Verbally Reader extension and does not run on any other website, and it never records the pages you visit, their addresses, or their content. The extension's only part in this is handing over that random install identifier. If you would rather not be included, blocking cookies for this site or using a tracker-blocking extension stops both tools; the site works exactly the same either way.

The Verbally extension stores a sign-in session and your preferences locally so you stay signed in. It sends us the product usage events described above — which Verbally features you used — and we forward those events to the same Google Analytics account, so we can see how people get on with Verbally in one place. The extension sets no cookies of its own, and the events we forward to Google carry a random identifier created on your device, the name of the action, and — for some actions — a small detail about the action itself, such as which language you were practising or the language your browser is set to; they do not carry your account, name or email address. Above all, the extension does not track your browsing: it does not record the pages you visit, their addresses, or their content — not to us, and not to Google.

Children. Verbally is not directed at children under 16 and we do not knowingly collect their data.

Changes to this policy. We may update this policy. The effective date at the top will change when we do. Material changes will be communicated through the extension or by email.

Contact. Questions about this policy: info.verbally@gmail.com.