How do you engineer a voice-activated condom launcher?

Three design goals that drive everything

Every technical decision in CondomShot traces back to three requirements, in this order:

1. The condom arrives intact. Sealed foil packet, undamaged, stored in condom-friendly conditions. Non-negotiable — a novelty dispenser that compromises the product it dispenses is worse than a bowl.
2. The catch is easy and safe. A gentle arc into an open hand at conversation distance, not a projectile. If a launch misses, the worst case is a condom on the floor.
3. The moment feels great. The spin-up sound, the LEDs, the catch — the theater is the point. That's what makes people want to use protection.

The voice pipeline: borrow the best recognizer you already own

Here's the counterintuitive engineering decision at the heart of CondomShot: the device itself has no microphone. Embedded wake-word engines are hobby-grade — they mishear music as commands, speak three languages badly, and put yet another always-on microphone in your bedroom. Meanwhile, the phone in your pocket already carries the best speech recognition on earth. So CondomShot doesn't compete with it — it delegates to it.

The device joins your Wi-Fi and exposes a minimal local web endpoint — in essence, a "fire" URL. A Siri Shortcut maps your chosen phrase to a call to that URL: the classic is "abfeuern" ("fire!"), but any phrase in any language your assistant speaks works. Say the words, the phone calls the endpoint over the local network, and the ESP32 runs the launch sequence.

Delegating recognition buys three things outright:

• Recognition quality for free. Noise-robust, multilingual, continuously improved by a trillion-dollar company — quality no embedded wake-word chip can match.
• A trigger phrase that's actually yours. Not a fixed factory wake word — you pick the phrase when you set up the shortcut. In-jokes encouraged.
• An open trigger, not a closed feature. Anything that can call a URL can fire it: a smart-home button, a Home Assistant automation, an NFC tag by the door, midnight on New Year's Eve.

And the privacy story gets simpler, not weaker: a device with no microphone physically cannot listen or record. Voice handling stays with the assistant you already use, under its rules — the launcher itself only ever hears one thing: a web request on your own network. There is no CondomShot cloud and no account.

The launcher: flywheel physics for foil packets

The launch mechanism is a flywheel accelerator — the same principle as a pitching machine, scaled way down and tuned way soft. When the trigger phrase is recognized:

1. A motor spins the flywheel up to launch speed. This takes about a second and a half — intentionally audible, because the spin-up is the drumroll.
2. The feeder pushes exactly one condom packet from the magazine into the wheel gap.
3. The wheel grips the stiff foil edge of the packet and accelerates it through a short guide, releasing it on a slightly upward trajectory.

The physics work in our favor: a condom packet weighs only a few grams and is aerodynamically draggy, so it sheds speed quickly and arrives at catching distance — roughly half a meter to a meter and a half from the device — floating rather than flying. Launch energy is capped in firmware; there is no configuration in which the device can launch harder than a casual underhand toss.

The magazine: brand-agnostic by design

Condom foil packets are not standardized — Durex, Billy Boy and einhorn packets all differ slightly in size, stiffness and seam layout. The magazine therefore treats the packet as a loose-tolerance object: a gravity-assisted stack with a compliant follower, adjustable for packet size, holding up to 15 condoms. Refilling takes seconds: open the housing, drop in a fresh stack, done. No proprietary refills, ever — a dispenser that locks venues into one condom brand would undermine the whole point.

Feedback design: LEDs, sound, and the moment

The device communicates its state without a screen: an idle glow when armed, a distinct light-and-sound ramp during spin-up (your cue to get your hand ready), and a confirmation blink after launch. The same cues double as error signaling — an empty magazine looks and sounds clearly different from a successful cycle, so venue staff can see status across the room.

Safety mechanisms and failure modes

Designing for a party environment means designing for misuse. The main cases:

• Packet integrity. The condom never leaves its sealed foil packet inside the device; rollers contact only the packet edge. Test packets are inspected after launch runs — foil abrasion or seam stress means redesign, not tolerance.
• Jam handling. If the feeder doesn't confirm a clean feed, the cycle aborts and the flywheel spins down — no double-feeds, no forcing.
• Face-distance safety. Launch energy is low enough that even a point-blank hit is harmless — comparable to being tapped by a tossed packet from across a table. Still, the guide rail launches upward-and-outward, above typical standing catch height.
• False triggers. There is no always-open microphone in the device to mishear anything — a launch happens only when the trigger URL is actually called. An accidental assistant activation is rare and costs at most one condom on the floor.
• Storage conditions. Latex ages with heat and UV. The enclosed indoor housing keeps condoms dark and at room temperature — comfortably within the cool-dry storage conditions condom manufacturers assume.

Test data from the working prototype

What's next: from prototype to certified product

A working prototype is live and demonstrable today. The path to shipping runs through CE certification (electrical safety and EMC), design-for-manufacturing on the housing, and expanded launch testing across more condom brands and packet types. The goal: 1,000 units within 18 months. Preorders — €69, no payment until delivery — fund exactly this work. Reserve yours on the homepage.