🦊 WhisperFox

Privacy policy — short, because there is very little to disclose.

The one-paragraph version

Your message is encrypted in your browser before anything leaves your device, and the encrypted message travels in the part of the link (#fragment) that browsers never send to servers. We have no accounts, no message database, no cookies, and no analytics. We cannot read your messages, and we store nothing about them.

What we never receive or store

  1. Your message. Encryption happens in your browser; the readable text and the sealed ciphertext never reach our servers in any form.
  2. Your encryption key or secret phrase. The key is generated in your browser and split so that our server only ever holds a random, content-free half. A secret phrase, if you set one, never leaves your device.
  3. Any record of your message's content. No message content, no keys, no phrases — there is no database of messages. One narrow, opt‑in exception: if the sender enables burn‑after‑read, we keep a content‑free “this link was already opened” marker (a random identifier that is already public in the link itself) so the link can refuse a second open. It reveals nothing about the message and self‑erases when the link expires.

What is processed, and by whom

  1. Hosting (Cloudflare). WhisperFox runs on Cloudflare Pages. Like any web host, Cloudflare processes your IP address and standard request data to deliver the site and defend it against attacks, under Cloudflare's privacy policy. We do not add logging of our own.
  2. Abuse protection (Cloudflare edge). Automated abuse of the create endpoint is stopped by a Cloudflare rate-limit rule at the network edge. It runs no script in your browser and sets no cookies — there is no third-party JavaScript anywhere on the site.
  3. The ad (EthicalAds). The site is funded by a single privacy-respecting ad from EthicalAds, which uses no cookies and no tracking scripts. Our server picks the ad; no ad JavaScript ever runs in your browser. If a sponsored ad is shown, your browser loads its image and a view counter directly from EthicalAds' servers, which — like any image request — reveals your IP address to them and nothing else. When no sponsor is available we show our own house ad and no third party is contacted at all.

Cookies, accounts, and tracking

None. WhisperFox sets no cookies, requires no account, and runs no analytics or tracking of any kind.

Reporting abuse

If a WhisperFox link is being used to harass you or in connection with something unlawful, email johnnypicklespartners@gmail.com. Because messages are end-to-end encrypted and never reach us, we cannot read or retrieve a message's content — but every link expires on its own within 24 hours at most, and we act on reports about how the service is used.

Changes

If this policy changes, the new version appears on this page. The project is open source, so the history of this page is public too.

Send a self-destructing message