Summary

28 of the 37 WebFaz apps never send your file outside your browser

This is not a marketing promise — it is the architecture: these apps run entirely in JavaScript in your browser (client-side). Your photos, PDFs, spreadsheets, videos and audio are read, processed and exported without passing through any WebFaz server. Closed the tab? No file of yours is left anywhere, because it never left your computer or phone.

There are 5 exceptions, always flagged on screen before you use them — described in detail below, along with exactly what is sent and to which service.

100% local apps

None of these apps uploads a file, image, audio, video, text or typed data — including those that read hidden metadata (GPS, author) from photos and documents: everything stays on your device only.

The 5 exceptions with AI

Some AI models of sufficient quality only exist hosted on third-party servers — you cannot run a whole Whisper Large-v3 in someone’s browser without freezing the device. In those cases, we tell you exactly what leaves your device:

WebFaz Video Editor

Sends the timeline audio (only when you click "Generate automatic captions") to Groq (Whisper Large-v3). Only when you turn on the AI option — the default is local.

The editor runs entirely in the browser and your videos are never uploaded. The only exception is the optional "Generate automatic captions" button (Captions panel): it mixes the timeline audio and sends it, in 30 s pieces, to the speech recognition service (Groq/Whisper) to create the captions. WebFaz does not store the audio.

WebFaz Subtitles

Sends the text of the lines, only when you click Translate subtitle to Groq. Only when you turn on the AI option — the default is local.

Conversion and extraction run in the browser. The optional translation sends only text to the WebFaz server and to Groq; videos and ZIP files are not sent.

WebFaz Puzzles

Sends the theme you type (a word or short phrase, never the game itself) to Google Gemini. Only when you turn on the AI option — the default is local.

Ready themes and the editor work 100% in the browser. Only the “Generate with AI” button sends the theme to our server, which passes it on to Gemini — the theme is not saved.

WebFaz Transcription

Sends the audio you upload or record with the microphone to Groq (Whisper Large-v3). This is the only way to use the app.

There is no 100% local mode: transcribing always requires sending the audio for processing. The file is not stored by WebFaz or by Groq beyond the time of the call.

WebFaz OCR

Sends the image or PDF page being analyzed to Groq (vision model). Only when you turn on the AI option — the default is local.

The standard mode runs 100% locally (Tesseract.js, in the browser). The image only leaves the device if you tick the “Try with AI” box — meant for handwriting and difficult photos.

Special cases: WebFaz E-books & Digital Reading, WebFaz Drop, WebFaz Network & Infrastructure, WebFaz Archives

Books, conversions, position and notes are processed locally. Backups are downloaded and restored by file on the device. When you turn on simultaneous translation, the text of the pages or chapters is sent to Groq through the WebFaz server; the original file, images and notes are not sent. The meaning lookup sends only the selected word to Wiktionary. The chosen voice may use operating system services.

Files and texts travel straight from one device to the other (encrypted WebRTC connection) and do not pass through any WebFaz server. For the devices to find each other, WebFaz uses a Netlify Function that turns your network’s public IP into an unrecognizable room name (HMAC) — the IP is not stored — and a real-time message channel (Supabase Realtime) that only relays the device’s name (“Blue Fox”), its type (phone, computer) and the connection signals. Nothing is recorded: there is no account, history or storage of the files.

Seeing your public IP, querying DNS, testing ports or measuring internet speed requires, by definition, talking to a server — the same would happen on any website you visit. It receives no file upload and no personal data typed in; it only exchanges network packets to measure what was requested, without saving anything.

Local files are processed in the browser, with no upload. When opening from a URL, the browser transfers the package directly from the server you enter, which receives the request. Access depends on CORS.

Cookies, ads and analytics

This site’s cookies serve to measure traffic and show ads; they do not read or receive the files or texts you use in the tools. Two things happen on WebFaz, and they are separate from each other:

  1. Your files and what you type in the apps: are processed in your browser and do not go to Google or to any other third party. The AI exceptions are listed above and flagged on screen.
  2. Visits and ads: the site uses Google services, which work as on any site that uses them. They see the visit (page accessed, device, approximate IP address, interaction with ads), never the content of the files you load.

What we use and what for

  • Google Analytics (audience measurement): analytics cookies that show, in aggregate, which tools are used most, so we can prioritize improvements. Legal basis: consent where the law requires it and legitimate interest in the other cases.
  • Google AdSense (advertising): Google and ad partners may use cookies to show and measure ads, including ones personalized from previous visits to this and other sites. This is what pays for hosting and keeps WebFaz free. The ads appear in a separate space, outside the tools’ controls.
  • Storage in your browser: preferences such as theme and saved projects stay in localStorage/IndexedDB on this device. They are not sent to us or to Google.

Your choice

In the regions where the law requires it (European Economic Area, United Kingdom and Switzerland), advertising and analytics cookies are only activated after your consent, requested through a Google message. You can change your mind at any time under “Cookie preferences”, in the footer of every page. In any region, you can also:

To learn how Google uses data from sites that use its services, see policies.google.com/technologies/partner-sites and Google’s privacy policy.

Anonymous click and scroll measurement

To find out what is confusing or hidden in the tools and improve the experience of those who use them, WebFaz measures, anonymously and in aggregate, where people click and how far they scroll on each page (a “heat map”).

  • What is recorded: the page, the type of device (computer, tablet or phone), which element on screen was clicked (for example, “the third button in the list”), in which region of it, whether there were repeated clicks in a row or a click with no response from the page, and how far the page was scrolled. Everything becomes a count: “+1 click on this button today”.
  • What is not recorded: IP address, location, typed text, field contents, file names or contents, or any identifier of a person or device. This measurement uses no cookies and writes nothing to your browser, so there is no history of you and it is not possible to know whether two clicks came from the same person.
  • Your files stay local: nothing you load or create in the tools is part of this measurement.
  • Your choice: in the regions where the law requires it (European Economic Area, United Kingdom and Switzerland), the measurement only happens if you accept audience analytics in the cookie message; if you decline in any region, it is turned off. You can change this under “Cookie preferences”, in the footer. The aggregated data is kept for up to 90 days.

Suggestions form and contact

The suggestions form on the home page asks for a message and, optionally, your name and email. This data is sent by email to the person responsible for WebFaz (processed by the Resend sending service) and used only to read the suggestion and, if you gave an email, to reply. We do not use it for advertising or share it with third parties beyond the sending. It stays in the maintainer’s inbox for as long as needed to handle the message, and you can ask for deletion at any time through the contact email. Legal basis: consent, when you submit the form.

Your rights, under the LGPD

Brazil’s General Data Protection Law (LGPD, Law No. 13,709/2018) guarantees you the right to confirm whether data is being processed, to access, correct, anonymize, block, delete or request portability of data, and to withdraw consent at any time. Since most of WebFaz does not receive your files or your personal data in the first place, there is nothing to correct or delete on our servers — in the AI exceptions, the file sent is itself not stored after the response.

For questions about this text or to exercise any of these rights (for example, about the data collected by Analytics/AdSense), write to webfaz.contato@gmail.com. The controller of the data processed on this site is Marcelo Amantino, the individual responsible for WebFaz (see About and Contact).

Changes to this policy

If an app starts sending data that used to be local only (or stops sending it), this page is updated along with it — the list of local apps and exceptions above reflects the current state of the code, not an old version.

Last updated: October 5, 2026.