Privacy Policy

Version 1.0 · Last updated 2026-07-06.

Plain-language draft. Before public launch this should be reviewed by a lawyer qualified in your jurisdiction of operation.

The short version

We don't want your text. Server-side is default because it's fast and convenient. But every tool in the Whisk web app has an Airplane mode toggle that runs the check entirely on your device — no network, no server involvement, verifiable in your browser's Network tab.

If you use server mode, we technically process what you send us long enough to return an answer, then discard it. We never write it to disk. We never train anything on it. We never share it.

What we collect (server mode)

Structured logs record only:

Endpoint path (e.g. POST /api/v1/spellcheck)
Timestamp
Latency
HTTP status code
Response size in bytes
Error category (if any)
Rate-limit bucket key (API key OR IP, not both)
Request ID (a random UUID, not linked to content)

We do not log:

The text you send
The suggestions or corrections we return
User agent, referer, or fingerprinting information
Any third-party analytics (Google Analytics, Mixpanel, Segment, Sentry — none of it)

Data retention

Request bodies live in memory for at most 60 seconds while being processed. Nothing is written to persistent storage. Structured logs (per above) are kept for 30 days for operational purposes (monitoring, incident response) and then deleted.

API keys

API keys are stored in a small SQLite database. Each key row holds only: the key value, an optional user-provided label, creation timestamp, plan tier, and revocation timestamp (if revoked). There is no email address, IP address, or account information linked to a key.

Because we don't associate keys with personal information, we can't recover a lost key. Generate a new one at /whisk/keys/.

Cookies

The Whisk web app uses localStorage for user preferences (mode toggle, personal dictionary, offline-save status). None of this ever leaves your browser.

We set no cookies, use no tracking pixels, and load no third-party analytics.

Cloudflare

The API is fronted by Cloudflare. Cloudflare sees your IP address and the request URL (as it does for every website using Cloudflare). Cloudflare's log retention and privacy practices are governed by their own policies. We do not extract Cloudflare's logs into our systems.

Airplane mode

When Airplane mode is on:

Text never leaves your browser.
Dictionaries and the Pyodide runtime were downloaded once and cached to your device.
You can verify this by watching the browser's Network tab, or by disabling wifi.

Airplane mode is available in the Whisk web app but not (yet) in third-party SDKs or the MCP server, which necessarily talk to our API.

Your rights

Because we don't hold identifiable personal information, we can't perform data-subject requests (access, delete, portability). If you want your API key to stop working, revoke it at /whisk/keys/ or via DELETE /api/v1/keys/me.

Contact

[email protected] or via any of the SDK repository issue trackers.