Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
SpeakPipe is a United States based widget that lets website visitors record and send voice messages and feedback. It stores audio recordings and sets cookies, and because voice content is personal data processed in the US, it carries clear consent and data transfer obligations under the GDPR.
SpeakPipe is a voice messaging widget that lets visitors leave a recorded audio message or voicemail directly from a website, commonly used for feedback, support, and testimonials. The recording is captured in the browser, uploaded to SpeakPipe, and made available to the site owner to listen to and respond.
SpeakPipe sets cookies to run the widget and associate a recording with a visitor session, and it stores the audio file together with metadata such as the time, page, and any name or contact details the visitor adds. A voice recording is personal data, and depending on its content it may reveal more than the words spoken.
Loading the widget and writing cookies require consent under Article 5(3) ePrivacy unless strictly necessary. Recording and storing a voice message is processing of personal data under the GDPR that needs a clear lawful basis and transparency. Because SpeakPipe operates from the United States, the audio is transferred to a third country and needs an appropriate transfer mechanism.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Only load SpeakPipe and start any recording after the visitor has chosen to leave a message and understands that it will be stored and sent to a US provider. Avoid setting non essential cookies on page load, and make the privacy information clear at the point of recording.
Sign a data processing agreement with SpeakPipe, confirm the transfer safeguard, and set a retention period for recordings so they are not kept longer than needed. Inform visitors that their voice message is processed in the United States, list the cookies, and provide a way to request deletion.
Websites using SpeakPipe must obtain user consent under GDPR regulations.
DPIA considerations
Voice recordings are personal data and can be sensitive depending on what visitors say, while processing takes place in the United States. A DPIA is advisable where SpeakPipe is used at scale or for support topics that may reveal sensitive information.
Sample consent text
We use SpeakPipe to let you send us a voice message. Your recording is stored and processed by SpeakPipe in the United States, and is only created if you choose to record one.
Third-party domains contacted
speakpipe.comcdn.speakpipe.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| speakpipe_session | Functional | Session | Runs the voice recording widget and links a recording to your session |
| speakpipe_uid | Functional | 1 year | Recognises a returning visitor who has left a message before |
SpeakPipe uses cookies for user preferences — inform visitors with a consent banner.
SpeakPipe sets a functional cookie to run the recording widget and link a recording to your session, and may set a cookie that recognises a returning visitor. These support the recording feature itself.
Yes. The widget loads third party scripts and processes a voice recording, which is personal data, so you need prior consent before it loads and before any recording is created and uploaded.
Processing the voice recording relies on consent under Article 6(1)(a) of the GDPR, and the cookie storage relies on consent under Article 5(3) ePrivacy. The visitor actively chooses to record and send the message.
Yes. SpeakPipe is operated from the United States, so recordings and metadata are processed there. You must rely on a transfer mechanism such as the EU US Data Privacy Framework or Standard Contractual Clauses and disclose the transfer.
A DPIA is advisable because voice recordings can be sensitive and are processed in the United States. Assess the content visitors are likely to share, the volume, and the retention period.
Load it only after consent, inform visitors at the recording point that the message goes to a US provider, sign a data processing agreement, set a retention period, and offer deletion on request.
EU hosted feedback or voice message tools can avoid the US transfer. Any tool that records audio still processes personal data and needs consent and a clear retention policy.
List the SpeakPipe cookies with their purpose and duration, explain that voice recordings are stored and processed in the United States, and name the transfer safeguard. Update the entry if the recording feature changes.