IT

Privacy policy

Last updated: 2 October 2026

This policy explains which personal data PizzaVox (pizzavox.com) processes and why, under Regulation (EU) 2016/679 ("GDPR"). In short: the audio and video files you use with our tools are never uploaded to our servers. They are processed entirely in your browser, on your device, and we have no way of seeing them.

1. Data controller

The data controller is Nicola Tesone, a private individual based in Italy. For any privacy request you can write to info@pizzavox.com.

2. Your files stay on your device

Transcription, audio extraction, conversion and trimming happen in your browser thanks to programs compiled to WebAssembly (whisper.cpp and FFmpeg). The file you select is read locally by your browser and the result is saved to your device. No part of the file, its content, its name or its metadata is sent to PizzaVox or to anyone else.

You can check this yourself: open your browser's developer tools, go to the "Network" tab, and see that nothing carrying your file is sent while it is processed.

3. Data we process

a) Technical browsing data

When you visit the site, your browser downloads pages, stylesheets, scripts, fonts and, when needed, the processing engines (FFmpeg, about 31 MB) and the Whisper transcription models (31 or 57 MB). To deliver this content our hosting provider, Cloudflare, Inc., necessarily processes technical data such as your IP address, browser type, time and requested page, also for security and abuse prevention. We do not use this data to profile or identify you.

Legal basis: legitimate interest in providing a working and secure website (Art. 6(1)(f) GDPR).

b) Anonymous counter of processed files

When processing finishes, the page sends our server an anonymous request that adds one to the public counter shown on the home page. The request contains no data about the file (no content, name, size or type) and no identifiers: the server stores only a total number. Like every request to the site, it passes through the Cloudflare infrastructure described in point a); the counter does not record IP addresses.

Legal basis: legitimate interest in measuring use of the service in aggregate form (Art. 6(1)(f) GDPR).

c) Emails

If you write to us, we process your email address and your message only to reply. Messages are kept as long as needed to handle the request and in any case no longer than 24 months. Mail sent to info@pizzavox.com passes through Cloudflare's Email Routing service.

Legal basis: steps requested by the data subject and legitimate interest in replying (Art. 6(1)(b) and 6(1)(f) GDPR).

4. Data stored on your device

Some information is kept only in your browser: it is never sent to us and we cannot read it.

  • Engines and models (Cache API): so you don't have to download tens of MB every time, your browser keeps FFmpeg and the Whisper models. These are program files identical for every user, not data about you.
  • Transcription speed (localStorage): after each transcription your browser notes how many seconds your device needed, only to estimate times better next time. It's a number, with no information about your files.
  • Temporary copy of the file to transcribe (IndexedDB): on some browsers transcription has to continue on a dedicated version of the page. In that case the file you chose is parked for a moment in the browser's local storage, to hand it to the next page, and is deleted when you close the page or remove the file (in any case no later than your next visit). The file never leaves your device.

You can delete all this data at any time from your browser settings by clearing the site data for pizzavox.com.

The site currently uses no cookies and no analytics or tracking tools. See the cookie policy for details.

5. Recipients and transfers

The technical data described in section 3 is processed by Cloudflare, Inc. as data processor. Cloudflare may process data outside the European Union; such transfers rely on the EU-U.S. Data Privacy Framework, to which Cloudflare is certified, and on the Standard Contractual Clauses approved by the European Commission. Data is never sold or shared with third parties for marketing purposes.

6. Advertising

In the future the site may show ads through Google AdSense to support its running costs. Before enabling them we will update this policy and the cookie policy and, where required, ask for your consent. In any case ads will never have access to the files you process, because those files never leave your device.

7. Your rights

You have the right to request access to your personal data, its rectification or erasure, restriction of processing and portability, and to object to processing based on legitimate interest (Articles 15–22 GDPR). To exercise them, write to info@pizzavox.com. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live.

8. Changes

This policy may be updated, for example when ads are introduced. The date of the latest update is shown at the top of this page. In case of discrepancies, the Italian version prevails.