Privacy Policy

Scope and who is responsible

This Privacy Policy applies to whisperwebfree.com and the Whisper Web browser application (the “Service”). Whisper Web is the operator responsible for the information described in this policy. You can contact us at support@whisperwebfree.com.

The Service is an independent tool and is not operated by, sponsored by or affiliated with OpenAI. This policy does not cover websites, media hosts or other services that you choose to visit or connect to.

Local media and browser storage

Your browser decodes selected files and microphone recordings and runs Whisper on your device, using its CPU or GPU and memory. MP4 to MP3 conversion also runs locally: the browser decodes the main audio track and encodes the MP3.

Selected media, decoded audio, transcripts and converted MP3 files are not sent to a Whisper Web application server. The source video is not stored in IndexedDB. We cannot view or retrieve data that remains on your device.

• Delete an individual transcript or converted MP3 from local history.
• Clear site data for whisperwebfree.com in your browser settings to remove all local transcripts, converted MP3 files and cached model files.
• Removing the browser, using private browsing or clearing site data may permanently erase local history. Whisper Web cannot restore it.

Network requests and providers

The website still needs network access. Receiving providers may process your IP address, browser and device type, approximate location, requested URL, date and time, referrer and security-related request data.

• Website delivery: hosting and network providers deliver the application, protect it from abuse and maintain availability. They may keep limited security or access logs under their own operational schedules. Hosting-level traffic measurements are separate from the in-page analytics choice.
• Model downloads: the first use of a model and later cache refreshes request files from Hugging Face. It receives the request directly from your browser and applies its own privacy policy.
• Direct media URLs: your browser requests the pasted URL from its host, which receives ordinary request data and applies its own terms and privacy practices. Whisper Web processes the fetched media locally.
• Product Hunt badge: when the footer badge comes into view, your browser may request its image from Product Hunt. The request uses a no-referrer policy and sends ordinary request data, such as your IP address and browser information, but no local media, filenames, transcripts or converted MP3 files.
• Support: if you email support@whisperwebfree.com, we receive your email address, message and information you include to respond, handle a request or investigate a problem. Do not attach confidential recordings or transcripts unless necessary.

Feedback you choose to send

When you select Send feedback, we receive the selected category, message, optional reply email, registered page path and interface language. These are stored in Cloudflare D1 with a receipt number, submission identifier and server timestamp to investigate problems, improve the Service and respond when possible. Authorized site administrators can view feedback; there is no public feedback list.

Opening the form connects to Cloudflare Turnstile, which processes technical request and browser information to prevent spam. The feedback database does not store your IP address or full browser user-agent. Cloudflare may process network information under its privacy policy.

We do not automatically attach files, recordings, transcripts, processing diagnostics or URL query parameters. Please do not include sensitive information. Draft text stays in this page's memory until submission or reload. Feedback works without optional analytics and does not enable GA4 or Plausible.

Feedback records are retained for approximately 180 days and deleted at the next cleanup, triggered by a valid submission or deployment. Contact support with your receipt number to request earlier deletion. Cloudflare processes this information for us.

• Cloudflare Privacy Policy

Analytics and your choices

Optional Google Analytics 4 and Plausible measurements stay off until you select Allow analytics. Rejecting analytics does not limit the tools. Google Analytics may use first-party cookies; Plausible events are sent directly without a session-replay script. Microsoft Clarity session replay is disabled.

After consent, analytics providers receive technical request information and usage measurements. Our code sends registered public page URLs, static titles and predefined usage categories. URLs include only allowlisted campaign values. Known referral domains are reduced to their public origin; referral paths, query strings, fragments and unknown domains are not transmitted.

Product events exclude media, microphone recordings, transcript text, filenames, pasted media URLs and free-form error messages.

After consent, sanitized source categories and registered landing pages can be kept in this tab's sessionStorage to follow a workflow between pages. This context contains no visitor ID, expires after 30 minutes without measured activity and is cleared on withdrawal. A long-running measured attempt retains its starting categories until its outcome.

Your analytics choice, version and choice time are stored in this browser for up to 180 days. Change or withdraw consent through Privacy settings on any page. Withdrawal disables subsequent optional measurements, attempts to cancel pending product-event requests and removes accessible first-party analytics cookies. It does not delete measurements already received by providers. If the browser cannot save your choice, analytics stays off. Clearing site data removes the choice.

Advertising and Google data use

Whisper Web currently does not offer user accounts or payments and does not include advertising.

Google AdSense is not currently enabled. Allow analytics does not authorize advertising cookies, personalized ads or sharing your media or transcripts for advertising. Advertising consent remains separate from the analytics choice.

If Google ads are introduced, Google and other advertising partners may place or read cookies, use web beacons, IP addresses and other identifiers to deliver and measure ads, prevent fraud and, where permitted and consented to, personalize ads. The applicable providers and privacy choices will be disclosed before advertising starts. We will not use local media, transcripts or sensitive personal information to build advertising audiences.

Before personalized Google ads are served to users in the EEA, the UK or Switzerland, the Service will need a Google-certified consent platform integrated with the applicable transparency and consent framework. This site's current analytics controls do not provide that advertising consent. Non-personalized advertising may also require consent for cookies or other processing.

• How Google uses information from sites and apps
• Google Privacy Policy
• Google My Ad Center
• Plausible data policy

Why information is processed

Where data protection law requires a legal basis, ordinary website requests are processed as necessary to provide the Service and for our legitimate interests in security, reliability and abuse prevention. Optional analytics is enabled based on your consent, which you may withdraw through Privacy settings. Support communications are processed to respond to your request, take steps you ask us to take, protect the Service and comply with legal obligations. We do not use your local media or transcript to train models.

Microphone access begins only after you use the recording control and grant browser permission. You can revoke that permission in your browser or operating-system settings.

Service providers, disclosures and transfers

We may rely on hosting, network, model-hosting, analytics and email providers for the limited purposes described in this policy. We may also disclose information when reasonably necessary to comply with law, protect users or the Service, investigate abuse, or establish and defend legal claims. We do not give providers access to media or transcripts that remain solely on your device.

Providers may process network or support information in countries other than your own, including the United States. Where required, transfers are made using an applicable legal mechanism. A third-party media host you choose is independently responsible for its own processing.

Retention and security

Successfully saved transcripts, timestamps, titles and model settings remain in this browser's IndexedDB until you delete them or clear site data. Converted MP3 files and their low-sensitivity metadata use a separate IndexedDB collection and are scheduled for deletion 30 days after creation. Entering conversion history or opening the converter runs that cleanup. The browser may remove data sooner, and a storage-quota failure may prevent a completed MP3 from being saved. Model files stay cached until the browser removes them or you clear the cache.

Analytics data, support messages and hosting or network logs are kept according to the applicable provider configuration and only as long as reasonably needed for the purposes described above, business records, disputes, security or legal obligations.

We use reasonable safeguards appropriate to a browser-delivered service, but no device, storage system or internet transmission is completely secure. Protect your device, browser profile and exported files, especially when a recording contains sensitive information.

Your privacy rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing; receive portable data; withdraw consent where consent is the basis; and appeal or complain to a data protection authority. You may email support@whisperwebfree.com to make a request. We may need enough information to verify and respond to it.

Most transcription and conversion data never reaches us, so we cannot access, export or delete it for you. Use the local history controls or your browser’s site-data settings instead. We will not discriminate against you for exercising an applicable privacy right.

Children

The Service is a general-audience tool and is not directed to children under 13. Children under 13 must not send personal information to us. If you believe a child has done so, contact support@whisperwebfree.com. Users who are not old enough to agree to these terms in their country should use the Service only with permission and supervision from a parent or legal guardian.

Changes and contact

We may update this policy when the Service, providers or legal requirements change. The effective date above identifies the current version. Material changes will be presented through the Service when required. Questions or privacy requests can be sent to support@whisperwebfree.com.