WHISPER PICTURE

Whisper Picture does not collect any data. The app runs entirely on your device, in your web browser or in the Whisper Picture iOS app. There is no account, no sign-in, and no server that receives your images, messages, passwords, or files.

What we collect

Nothing. We collect no personal information, no usage analytics, no device identifiers, and no location. We do not use cookies for tracking, and we show no ads.

How your content is handled

Every operation — hiding a message in a photo, encrypting it, and reading it back — happens locally on your device using its own processor. The photos, text, files, and passwords you use never leave your device. Nothing is uploaded, transmitted, or stored anywhere by us.

On the website this is backed technically: its Content-Security-Policy limits the page's own network access to the site's origin (connect-src 'self'), so the app's code has no route to send your content to a third-party server. The iOS app bundles all of its code and, in normal use, makes no network requests — it works offline, in Airplane Mode. The Android app displays this same website; the page loads from our server, but your photos, messages, and passwords are still processed only on your device and are never sent anywhere.

When you save a stego photo, it is rebuilt pixel-by-pixel on your device, so the saved image carries none of the original photo's hidden metadata — no camera model, date, or GPS location travels with it.

What this does and does not protect. Whisper Picture hides the contents of your secret and, with a decoy password, lets you deny which secret a picture holds. It does not guarantee that the presence of a hidden payload is undetectable: an expert examining the image with forensic tools may be able to tell that something is concealed. Treat it as strong privacy from ordinary viewers, not as invisibility against a determined forensic adversary.

Third parties

We do not share data with third parties, because we do not have any of your data. The website is served as static files (hosted on Vercel) and loads no third-party scripts, trackers, fonts, or analytics.

Children

Whisper Picture is a general-audience utility and is not directed at children. It collects no data from anyone, including children.

Changes

If this policy ever changes, the updated version will be posted at this URL with a new effective date.

Contact

Questions: spindola.software@gmail.com