Lector runs entirely in your browser: no account, no server, and no page content leaves your computer. The only network access is the one-time voice model download from Hugging Face.

Please report security issues privately through GitHub's private vulnerability reporting, not as a public issue. Include what you found, how to reproduce it, and the Lector version (Settings in the popup, or chrome://extensions).

You should get a reply within a week. Fixes ship in a new release on GitHub and the Chrome Web Store, and reporters are credited unless they'd rather not be.

Only the latest release is supported.