Clear Privacy Contracts

[tcurdt]

We would love to use this API but AFAICS there is no clear way to specify privacy contracts (unless I missed those).

We would like to explicitly specify that a browser should NOT talk to some backend server to do the text-to-speech conversion. This has can have some very bad privacy implications.

Some browser seem to work fine (for some languages) in offline mode - but there does not seem to be a clear contract. And it's not acceptable to the tell the users that we don't know whether a backend may or may not be contacted.

IMO it's essential to have this explicit in the API.

[jankapunkt]

It would have been nice to get at least a comment on this one. To this current date no one really talks about this.