Is it safe to use online converters? Convert without uploading
Short answer: your suspicion is correct. Most online converters upload your entire file to a server, and you have no way to verify what happens to it there. mp3fy takes the other path: for nearly every format, conversion runs inside your browser on your own device, and the file is never uploaded. You can confirm that yourself in about two minutes; the last section shows how.
The fear is justified
The typical converter site works exactly the way you suspect. You upload the file. A machine you will never see converts it. You download the result and hope the copy on their disk gets deleted.
The privacy policy promises it does. Maybe that’s true. You can’t check. The whole process happens on hardware you can’t inspect, run by companies funded by ads and upsells, which is not a business model that rewards restraint with your data.
A recorded meeting, a voice memo from a doctor’s appointment, an unreleased demo. None of that belongs on a stranger’s server just to become an MP3.
How converting without uploading works
Every browser ships a full media engine, the same code that plays video on every site you visit. When you drop a file on the converter, that engine reads and decodes it locally, straight from your disk.
The decoded audio goes to a LAME MP3 encoder compiled to WebAssembly, running inside the tab like any other page script. The finished MP3 lands in the browser’s own storage on your device, and you save it from there.
No server ever holds the audio. Your browser’s network tab shows the page loading and then nothing: zero upload traffic during a device conversion.
This is also why mp3fy has no size or duration limits. Caps exist to protect someone’s server bill; with no server in the loop, there is nothing to cap. A 4 GB video converts the same way a 4 MB voice memo does.
One more consequence: your history stays yours. Finished files sit in your browser’s storage for 7 days so you can save them again, and you can clear them any time. The details are on the privacy page.
The honest exception
A handful of formats can’t be decoded by any browser: WMA, RealAudio, ASF, APE, AC3, DTS, and a few other relics. The formats page marks exactly which ones.
For those, mp3fy runs a cloud conversion and says so plainly on the file’s row while it happens. You can cancel at any moment, and a Cloud switch in the options row lets you send everything there on purpose instead.
If you go ahead, the rules are strict and specific. The upload is deleted the moment conversion finishes. The output expires 1 hour after you first download it, or after 24 hours no matter what.
Nobody looks at files. The only records kept are anonymous job stats, with no filenames and no IP addresses. A Cloudflare Turnstile bot check runs before each cloud job, so a free service doesn’t get scripted into the ground.
That’s the whole exception. WMA to MP3 is the common case, and there’s a longer walkthrough if you’re clearing out an old Windows music folder.
What you can check yourself
Don’t take any of this on faith. Two tests, two minutes, no expertise required.
First, the network tab. Open your browser’s devtools (F12 on most), switch to Network, and convert a file. For a device conversion you’ll watch the page load its scripts and then go quiet: no POST requests, no upload stream, nothing carrying your file anywhere.
Second, the airplane-mode test. Start a conversion, then cut your connection midway. A device conversion keeps running and finishes, because nothing it needs is on the network. A converter that secretly depended on a server would die on the spot.
Run the same two tests on any other converter site. The comparison is instructive.
Why it’s built this way
mp3fy is free, ad-free, and has no accounts. There are no tracking scripts on the converter. Measurement is cookieless Cloudflare Web Analytics and nothing else. The project runs on donations, which means the incentive is your trust, not your data.
“Is it safe to use an online converter” is the wrong question to have to ask. The right design makes it moot: a file that never leaves your device can’t be leaked, sold, or kept by anyone.
Yours doesn’t leave.