1. Scope and who is responsible
This Privacy Policy applies to whisperwebfree.com and the Whisper Web browser application (the “Service”). Whisper Web is the operator responsible for the information described in this policy. You can contact us at [email protected].
The Service is an independent tool and is not operated by, sponsored by or affiliated with OpenAI. This policy does not cover websites, media hosts or other services that you choose to visit or connect to.
2. Information that stays on your device
When you choose a local file or record through your microphone, the browser decodes the media and runs the selected Whisper model on your device. Whisper Web does not upload that media to an application server. Processing may use your device’s CPU or GPU and browser memory.
When you use the MP4 to MP3 converter, the browser reads the source video, decodes its main audio track and creates the MP3 on your device. The source video, decoded PCM and output MP3 are not sent to a Whisper Web application server, and the source video is not stored in IndexedDB.
Completed transcripts, timestamps, titles and model settings are stored in IndexedDB in the browser you are using. A successfully saved converted MP3 and its low-sensitivity metadata are stored in a separate IndexedDB collection for up to 30 days. Model files may be stored in the browser cache. We cannot view or retrieve this local data.
- You can delete an individual transcript or converted MP3 from local history.
- Converted MP3 history is automatically removed after 30 days. Your browser may remove it earlier, and a storage-quota failure may prevent a completed MP3 from being added to History.
- You can remove all local transcripts, converted MP3 files and cached model files by clearing site data for whisperwebfree.com in your browser settings.
- Removing the browser, using private browsing or clearing site data may permanently erase local history. Whisper Web cannot restore it.
3. Information processed over the network
Local transcription does not mean that the website works without network access. The following requests may disclose ordinary technical information such as your IP address, browser and device type, requested URL, date and time, referrer and security-related request data to the receiving provider.
- Website delivery: hosting and network providers process requests needed to deliver the application, protect it from abuse and maintain availability. They may retain limited security or access logs under their own operational schedules.
- Model downloads: the first use of a model, and later cache refreshes, request model files from Hugging Face. Hugging Face receives the request directly from your browser and handles it under its own privacy policy.
- Direct media URLs: if you paste a media URL, your browser requests that URL from its host. That host can receive ordinary request data and will apply its own terms and privacy practices. The fetched media is then processed locally by Whisper Web.
- Product Hunt badge: when the footer badge comes into view, your browser may request the badge image from Product Hunt. Product Hunt receives ordinary request data such as your IP address and browser information. The request uses a no-referrer policy and does not include local media, filenames, transcripts or converted MP3 files.
- Optional analytics: after you allow analytics, Google Analytics 4 and Plausible receive technical request information and usage measurements. Our pageview and product-event code sends registered public page URLs, static page titles and predefined usage categories. Page URLs include only allowlisted campaign values. Known referral domains are reduced to their public origin; referral paths, query strings, fragments and unknown domains are not transmitted. After consent, sanitized source categories and registered landing pages can be kept in this tab's sessionStorage to follow a workflow between our pages. This context contains no visitor ID, expires after 30 minutes without measured activity and is cleared on withdrawal; a long-running measured attempt retains its starting categories until its outcome. Product events exclude media, microphone recordings, transcript text, filenames, pasted media URLs and free-form error messages. Session replay through Microsoft Clarity is disabled. Hosting-level traffic measurements may also be processed by the delivery provider; the in-page analytics choice does not control hosting infrastructure.
- Support: if you email [email protected], we receive your email address, message and any information you choose to include so that we can respond, handle a request or investigate a problem. Do not attach confidential recordings or transcripts unless necessary.
4. Accounts, analytics, advertising and cookies
Whisper Web currently does not offer user accounts or payments and does not include advertising. Optional Google Analytics 4 and Plausible measurements remain off until you select Allow analytics. Rejecting analytics does not limit the transcription or conversion tools. Google Analytics may use first-party cookies; Plausible events are sent directly without loading a session-replay script. Technical requests can reveal your IP address, browser information and approximate location to the receiving provider.
Your analytics choice, its version and the time of your choice are stored in this browser for up to 180 days. You can change or withdraw consent through Privacy settings on any page. Withdrawal disables subsequent optional measurements, attempts to cancel pending product-event requests and removes accessible first-party analytics cookies. It does not delete measurements already received by providers. If your browser cannot save your choice, optional analytics stays off. Clearing site data also removes your choice.
Advertising and Google data use
Google AdSense is not currently enabled. Allow analytics does not authorize advertising cookies, personalized ads or sharing your media or transcripts for advertising. Advertising consent remains separate from the analytics choice.
If Google ads are introduced, Google and other advertising partners may place or read cookies, use web beacons, IP addresses and other identifiers to deliver and measure ads, prevent fraud and, where permitted and consented to, personalize ads. The applicable providers and privacy choices will be disclosed before advertising starts. We will not use local media, transcripts or sensitive personal information to build advertising audiences.
Before personalized Google ads are served to users in the EEA, the UK or Switzerland, the Service will need a Google-certified consent platform integrated with the applicable transparency and consent framework. This site's current analytics controls do not provide that advertising consent. Non-personalized advertising may also require consent for cookies or other processing.
5. Why information is processed
Where data protection law requires a legal basis, ordinary website requests are processed as necessary to provide the Service and for our legitimate interests in security, reliability and abuse prevention. Optional analytics is enabled based on your consent, which you may withdraw through Privacy settings. Support communications are processed to respond to your request, take steps you ask us to take, protect the Service and comply with legal obligations. We do not use your local media or transcript to train models.
Microphone access begins only after you use the recording control and grant browser permission. You can revoke that permission in your browser or operating-system settings.
7. Retention and security
Local transcripts remain in your browser until you delete them or clear site data. Saved converted MP3 records are scheduled for automatic deletion 30 days after creation; entering conversion history or opening the converter runs the cleanup, but your browser may clear site data earlier. Model files remain cached until the browser removes them or you clear the cache. Analytics data, support messages and hosting or network logs are kept according to the applicable provider configuration and only as long as reasonably needed for the purposes described above, business records, disputes, security or legal obligations.
We use reasonable safeguards appropriate to a browser-delivered service, but no device, storage system or internet transmission is completely secure. Protect your device, browser profile and exported files, especially when a recording contains sensitive information.
8. Your privacy rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing; receive portable data; withdraw consent where consent is the basis; and appeal or complain to a data protection authority. You may email [email protected] to make a request. We may need enough information to verify and respond to it.
Most transcription and conversion data never reaches us, so we cannot access, export or delete it for you. Use the local history controls or your browser’s site-data settings instead. We will not discriminate against you for exercising an applicable privacy right.
9. Children
The Service is a general-audience tool and is not directed to children under 13. Children under 13 must not send personal information to us. If you believe a child has done so, contact [email protected]. Users who are not old enough to agree to these terms in their country should use the Service only with permission and supervision from a parent or legal guardian.
10. Changes and contact
We may update this policy when the Service, providers or legal requirements change. The effective date above identifies the current version. Material changes will be presented through the Service when required. Questions or privacy requests can be sent to [email protected].