Is WhatsInMyFile safe?

Short answer: your files never leave your device. Every check and every clean happens in your browser, on your own phone or computer. We never receive your files, so we can't see them, keep them, or lose them in a breach.

How it works

When you drop a file into one of our tools, the page reads it in your browser, the same way a photo app opens a picture. The results are worked out on your device. When you clean a file, the clean copy is made on your device too and goes straight to your downloads.

That's why a check takes a second even for a large video: nothing is being uploaded.

Check it yourself

You don't have to take our word for it. Here are two ways to see it for yourself.

Turn off your internet

Open any tool and let the page load. Then turn off Wi-Fi, or switch on airplane mode, and drop in a file. The check still works, because nothing needs to go anywhere. Cleaning photos and MP3, WAV and FLAC audio works offline too. The document, PDF and video cleaners, and the M4A cleaner that shares the video code, download their code the first time you use them, so they need a connection for that first clean.

Watch the network

In Chrome, Edge or Firefox, right-click the page, choose Inspect, and open the Network tab. In Safari, turn on the developer features in Safari's settings first, then open the Web Inspector. Now drop in a file. No request will carry your file.

The few small requests you may see are Cloudflare's visitor counter, our anonymous step counts (each holds the name of a step, like "saw the prices", and the page it happened on), and, if you have Pro, a check that your license key is valid, which also sends a random browser ID and a label like “Chrome on Mac”.

Your browser enforces it

Every page comes with a security policy that tells your browser which servers the page may talk to: whatsinmyfile.com and Cloudflare's visitor counter, nothing else. If any script tried to send your file somewhere else, your browser would block it. You can read the policy in the Network tab, under the response headers for the page (it's the Content-Security-Policy line).

Our own server has no place for files either. It only handles license keys, payments, email signups and those anonymous counts.

Nothing of yours to steal

A lot of data breaches happen because a site keeps something worth stealing. We keep as little as we can:

• We never have your files.
• There are no accounts and no passwords. Pro uses a license key instead.
• We never see card details. Payments go through Stripe, which sells Pro to you as the merchant of record.
• If you buy Pro, we store your email address, plan and license key, plus a random ID and a label like “Chrome on Mac” for each browser that uses the key (up to 5). If you subscribe to our email, we store your email address. That's it.

The privacy policy lists every piece of data in detail.

What we don't do

No ads, no tracking cookies, and no third-party scripts apart from Cloudflare's visitor counter, which sets no cookies. We don't sell or share data with anyone.

Who's behind it

WhatsInMyFile is built by Lars Arnesen and run by Rymeio Marketing OÜ, registered in Estonia. Company details are on the about page.

Found a security problem?

Please email hello@whatsinmyfile.com with the details. We'll reply, and keep you posted while we fix it. Security researchers can also find our contact details in our security.txt file.