The one-sentence version

Your video and audio files are read and converted entirely inside your browser. They are never uploaded to Wave, and there is no server on our side that could receive them.

What data Wave does not collect

  • The files you convert. Every conversion runs locally in a WebAssembly build of FFmpeg loaded into your browser tab. No part of your source file, and no part of the converted output, is sent to Wave or to any third-party service through Wave.
  • Filenames, durations, formats, or any other metadata about your files. These are read by the converter running in your browser and stay there.
  • Accounts, emails, or profile information. Wave has no login system and never asks for personal information.
  • Payment information. Wave is free. There is no billing system.

What our hosting provider sees

Wave is hosted on Cloudflare Pages. When your browser loads a page, Cloudflare processes the request and can log information typical of any web-serving CDN: your IP address, the User-Agent string of your browser, the URL you requested, and the timestamp. Cloudflare uses this information for anti-abuse, DDoS mitigation, and standard traffic analytics; their privacy policy covers what they do with it. We do not receive individual request logs from Cloudflare and do not export or resell them.

Cloudflare may set a cookie named __cf_bm on your browser as part of its bot-management system. This is not a Wave cookie; it exists to distinguish humans from automated traffic and lasts about 30 minutes.

Third-party requests

The site loads the Archivo webfont from Google Fonts. Loading a font from Google Fonts causes your browser to make a request to Google's servers, which see your IP address. Google Fonts sets no tracking cookies and states that font requests are not used for ad targeting; their privacy FAQ details the specifics.

Wave plans to serve display advertising through Google AdSense in future to help keep the site free. When AdSense is enabled, it will use cookies and similar technologies to serve ads based on a user's prior visits to this and other websites; Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this and other sites on the internet. You will be able to opt out of personalized advertising by visiting Google Ads Settings. Vendors and third parties that use cookies for personalized advertising are listed in Google's policies for partner sites. Ad-serving code, once enabled, will not have access to the video files you convert; those remain in the browser tab that runs the converter engine.

No analytics services run on this site. If we add analytics or additional third-party services in future, we will list them here before they go live.

Cookies and browser storage

Wave itself sets no cookies. The site does not use localStorage, sessionStorage, or IndexedDB to persist information about you or your files. Your browser will cache the WebAssembly engine (about 30 MB) so the second visit is fast; this cache is standard HTTP caching, invisible to us, and clearable from your browser's site-data settings at any time.

Analytics

Wave runs no analytics service at this time. If we add one in the future, we will pick a privacy-respecting option that does not use cookies or fingerprint visitors (such as Plausible or a self-hosted equivalent), and we will update this page before deploying it.

Children under 13

Wave is not directed at children under 13, does not knowingly collect personal information from anyone under 13, and does not need to, because it does not collect personal information from anyone.

Your rights (GDPR, CCPA, and similar frameworks)

Because Wave does not collect or store personal data about you, most standard data-subject rights (right of access, deletion, rectification, portability) are effectively satisfied by default: there is nothing on our side to access, delete, or export. If you believe Wave is in possession of personal data about you and would like it addressed, email us at the address below.

Data breaches

There is no user data store to breach. In the unlikely event that Cloudflare's infrastructure is compromised, that would be a Cloudflare incident, and their disclosure practices apply.

Changes to this policy

If we change what services the site uses or add anything that could affect your privacy (analytics, ads, a login system), we will update this page and note the change here.

Contact

Privacy questions and data requests: technorology@gmail.com.