Hm, this is actually a very interesting case. If the extension is (I'm assuming) literally just leveraging the API and not storing anything at all, would it be

Hm, this is actually a very interesting case. If the extension is (I'm assuming) literally just leveraging the API and not storing anything at all, would it be sufficient to let people know it's doing so in order to be compliant with GDPR? Does this even count as something that would be covered by GDPR? Is it because the data collection is tangential to the "service" being offered? Chrome's Privacy page [1] doesn't say anything about the API. Other people have also been wondering about the privacy implications of using the Speech API. What an interesting rabbit hole! 1: https://www.google.com/intl/en/chrome/privacy/ https://www.google.com/intl/en/chrome/privacy/