Privacy Policy
Last updated: November 9, 2026 · GDPR & International Privacy Standards Compliant
Core Foundation: Local Processing by Default
WhatMedia was architected from day one under strict "Privacy by Design" guidelines. When using WhatMedia, media analysis and transcoding run entirely within your device's web browser memory. No media files are uploaded to our servers.
1. Personal Data Collected
WhatMedia requires no account creation, no usernames, no email addresses, no phone numbers, and no passwords. We use zero tracking cookies, zero marketing tags, and zero browser fingerprinting scripts.
2. Exceptional Case: Fallback Server
If your mobile device hardware cannot handle in-browser encoding (missing modern codecs), WhatMedia may offer a temporary cloud processing fallback.
- This option strictly requires your explicit consent via a dedicated confirmation modal.
- Files are processed using ephemeral cryptographically random tokens (256-bit UUID), stripping all non-essential metadata.
- Uploaded inputs and converted outputs are automatically deleted within 15 minutes maximum.
- Files are never shared, sold, or used for machine learning / AI model training.
3. Self-Hosted Assets & Zero Third-Party CDNs
To prevent IP address leakage to external corporations, all typography (Space Grotesk, Inter, JetBrains Mono) and scripts are self-hosted on our static hosting. No requests are ever made to Google Fonts or third-party content networks.
4. Your Privacy Rights
In compliance with the General Data Protection Regulation (GDPR) and international privacy laws, because we store no identifiable customer databases or account records, no profiling occurs. For security audits or inquiries, open an advisory on GitHub.
5. Contact Information
Security and privacy contact: contact@nealix.org or via GitHub Security Advisories.