Overview
Wispr is a zero-knowledge service. We store only encrypted ciphertext. We cannot read your data. Period. Our entire architecture is built around this principle: ensuring your privacy through cryptographic certainty, not just corporate promises.
Data We Collect
When you use Wispr, we temporarily collect and process the following:
- IP Addresses: Included in standard web server logs to prevent abuse. These logs are automatically purged within 30 days.
- Encrypted Payload: The raw ciphertext and Initialization Vector (IV) generated by your browser.
- Metadata: Creation timestamp, expiry configuration, view counts, and maximum views.
We do NOT collect:
- Message content in plaintext
- File content in plaintext
- Encryption keys (they reside in the URL fragment)
- Passwords (they never leave your device)
Data Retention
Secrets set to "burn-after-reading" are permanently deleted from our database the moment they are successfully revealed to a recipient. If a secret reaches its expiration date or maximum view count, it is permanently deleted by automated sweeping jobs. We retain no backups of deleted secrets.
Third Parties
We do not share your data. We use:
- No analytics: We do not track your behavior.
- No tracking scripts: There are no Meta pixels, Google Analytics tags, or similar trackers on Wispr.
- No CDNs seeing plaintext: Any assets served are static; user data is encrypted before transmission.
- No advertising: Wispr is ad-free.
Cookies
Wispr uses no cookies. There are no tracking cookies, session cookies, or marketing cookies. We use local localStorage strictly for saving your UI preferences (like default expiry times) entirely on your device.
GDPR / CCPA
We fully support global privacy laws like GDPR and CCPA. However, due to our zero-knowledge design, our compliance looks a bit different:
- Right to Access: You have the right to know what data we hold. If you provide a secret ID, we can confirm we hold its encrypted ciphertext. We cannot provide the plaintext, as we do not have it.
- Right to Deletion: Secrets are automatically self-deleting. For immediate deletion, simply reveal a burn-after-reading secret yourself.
Contact
For privacy questions, legal inquiries, or data requests, contact us at: [email protected]