Privacy Policy
Last updated: January 16, 2026
Total privacy. No cookies. No consent required.
PrivAudio doesn‘t use cookies. Your files never leave your device. Conversion happens 100% in your browser using WebAssembly. We use cookieless analytics (Plausible) under legitimate interest. We store minimal functional data in localStorage. We don‘t collect personally identifiable information.
1. Introduction
PrivAudio respects your privacy. This policy explains what (minimal) data we collect and how we use it. By using PrivAudio, you accept these practices.
2. What data we collect
2.1. Data we DO NOT collect
- ✗Your audio files: We don‘t upload, store, or process your files on our servers. Conversion happens 100% in your browser.
- ✗Cookies: We don‘t use cookies. Neither first-party nor third-party.
- ✗Personal information: We don‘t collect name, email, address, phone, ID numbers.
- ✗Precise location: We don‘t track your GPS location.
- ✗IP address: We don‘t permanently store your IP address. Our server (Hetzner, Germany) temporarily logs IPs in system logs for security for a maximum of 7 days.
2.2. Data we DO collect (minimal, anonymous, cookieless)
a) Anonymous web analytics (Plausible Analytics)
We use Plausible Analytics, a privacy-friendly analytics tool that does NOT use cookies:
- Pages visited (without identifying individual users)
- Country of origin (based on IP, without storing IP)
- Browser and operating system (without specific version)
- Conversion events (without file details)
Plausible does NOT use cookies. It generates a privacy-friendly rotating hash (changes every 24 hours) without storing any persistent identifiers. Doesn‘t collect personally identifiable information. Data stored in the EU (GDPR compliant).
Plausible‘s privacy policy →b) Data stored locally on your device (LocalStorage)
We use your browser‘s LocalStorage to store functional data:
- conversion_count: Number of conversions you‘ve done (for analytics).
- has_converted: Whether you‘ve converted a file (for UX improvements).
- visit-count: Number of visits (for smart PWA install prompts).
- pwa-install-dismissed: Whether you dismissed the install prompt.
This data is stored only in your browser, not on our servers. You can delete it anytime from your browser settings or use our Data Controls feature.
c) Web performance metrics (Web Vitals)
We collect anonymous performance metrics (LCP, FID, CLS) to improve site speed. Not linked to individual users.
d) Shared files via PWA (Android)
When you share audio files to PrivAudio from other apps (e.g., WhatsApp) on Android devices:
- Temporary processing: Files pass through our server for less than 1 second (in-memory only, no disk writes).
- Zero retention: We don‘t log, analyze, or store shared file contents.
- In-memory only: Files are processed entirely in your browser‘s memory and never saved to any storage.
- No metadata: We don‘t collect information about file origin (source app, contact, location).
Legal basis: Temporary processing necessary for service performance (Art. 6(1)(b) GDPR). Your sharing action constitutes implied consent for this momentary processing.
3. How we use your data
Provide the service
Enable audio conversion in your browser and track usage for analytics.
Improve the service
Analyze aggregated usage (pages visited, conversion rates) for improvements.
We never sell, rent, or share your data with third parties for commercial purposes.
4. Legal basis (GDPR)
| Data | Legal basis (GDPR Art. 6) |
|---|---|
| LocalStorage (conversion count, visit count, PWA state) | Legitimate interest (functional service operation) |
| Analytics (Plausible, cookieless) | Legitimate interest (anonymous, cookieless analytics) |
| Web Vitals (performance) | Legitimate interest (user experience improvement) |
No consent banner needed: Because we don‘t use cookies and our analytics are cookieless (Plausible), we operate under GDPR‘s legitimate interest basis. You can still control your data using our Data Controls feature or your browser settings.
5. Who we share your data with
Service providers (data processors)
Plausible Analytics
Purpose: Anonymous usage statistics
Data: Page views, no personal data
Location: EU servers
GDPR: Compliant, no cookies
Privacy policy →Resend (resend.com)
Purpose: Send transactional emails (feedback confirmations, notifications)
Data: Your email address only (if provided)
Retention: Until you unsubscribe
Privacy policy →Hetzner (Hosting)
Purpose: Server hosting
Data: Standard server logs (IP, timestamp)
Retention: 7 days maximum
Location: Germany (EU)
Privacy policy →We don‘t share your data with third parties for: Advertising, marketing, data selling, or any other commercial purpose.
6. Your rights (GDPR)
Since we collect anonymous data and don‘t use cookies, most GDPR rights don‘t apply (we can‘t identify you individually). However, you have the right to:
- Delete your LocalStorage (conversion tracking data) from your browser
- Block Plausible with an ad-blocker
- Request information about our privacy practices
- File a complaint with your data protection authority if you believe we‘ve violated your rights
Contact
For privacy questions: hello@privaudio.com
Your Data Controls
GDPR: Right to erasure and data portability
Only in your browser - not on our servers
Important: Clearing all data will reset your conversion limits and preferences. Your history cannot be recovered.
7. Data retention
| Data type | Retention period |
|---|---|
| Audio files | 0 seconds (never stored on our servers) |
| Conversion timestamps (LocalStorage, your device) | 30 days maximum (auto-cleanup) |
| Feedback submissions (Redis) | 90 days |
| Analytics (Plausible, aggregated) | 2 years (anonymous data) |
8. Security
- HTTPS/TLS for all connections
- 100% browser-based conversion (no file transmission)
- No cookies (no cookie theft risk)
- Minimal data stored (only what‘s necessary)
- Infrastructure on Hetzner (Germany, EU)
9. International transfers
Your data is processed in the European Union (Hetzner, Plausible). We don‘t transfer data outside the EEA.
10. Children‘s privacy
PrivAudio is not directed at children under 16. We don‘t knowingly collect data from minors.
11. Changes to this policy
We may update this policy occasionally. Update date indicated above.