Privacy
Last updated 25 August 2026. The short version: your files are yours. mp3fy is built so that in the normal case we never receive them at all.
Converting on your device (the default)
Most files are converted inside your browser. The file is read locally, the MP3 is written to your browser’s private storage, and nothing is uploaded anywhere. Finished MP3s stay in your browser’s storage for up to 7 days (the History view) so you can save them again; you can remove them at any time with “Clear history”, and clearing your browser’s site data removes everything.
Converting in the cloud
Some formats can’t be decoded by browsers at all. Those files are converted in mp3fy’s cloud automatically, and the row says so while it happens; you can cancel at any point. There is also a Cloud switch in the options row that sends everything to the cloud if you prefer. Either way:
- Your file is uploaded over an encrypted connection to storage we rent from Cloudflare, converted by our software, and the upload is deleted immediately after the conversion finishes(or fails).
- The resulting MP3 is deleted one hour after you first download it, and after 24 hours at the latest, whether you downloaded it or not.
- Nobody looks at your files. They are processed entirely by machines.
- Before a cloud job starts, Cloudflare Turnstile runs a quick bot check in your browser (that is the only reason a Cloudflare challenge script loads).
What we keep
For cloud conversions we keep anonymous job statistics: file sizes, audio duration, format and codec names, timings and the outcome. No filenames, no file contents, no IP addresses, no identifiers; there are no user accounts to attach anything to. Device conversions never reach us, so there is nothing to keep.
Notifications (optional)
If you turn on “Notify me when it’s done”, your browser creates a notification subscription and mp3fy stores it on that one conversion job. It is deleted as soon as the notification is sent, and in any case when the job expires. Specifically:
- No email address and no account. The subscription belongs to the browser, not to a person, and there is nothing to sign up for or unsubscribe from.
- One job, one notification. There is no subscriber list: each job holds its own copy and forgets it immediately afterwards. mp3fy cannot send you anything else.
- We cannot read it in transit, and neither can the delivery service.The notification is encrypted to your browser, so Google, Mozilla or Apple relay bytes they cannot open, and the filename never leaves your device in the clear.
- Turning notifications off in your browser’s site settings stops them at once.
Cookies and third parties
- We measure traffic with Cloudflare Web Analytics (cookieless and anonymous) and, only if you allow it in the consent card, Google Analytics. If you decline, or simply never answer, the Google Analytics script is not even loaded and your browser never talks to Google. If you allow it, what we send is limited to anonymous usage events: pages viewed, formats converted, timings and outcomes. Never filenames or file contents. Change your choice any time via “Cookies” in the footer; the choice itself expires after 12 months and we ask again. SeeGoogle’s privacy policy.
- The site runs on Cloudflare, which may set strictly functional security cookies (for example during a Turnstile check) and sees traffic metadata like any host does.
- Background photographs come from Unsplash, served through our own cache; your browser never talks to Unsplash.
- If you donate, the payment form is provided by Donorbox and loads only on the donate page or after a finished conversion; your payment details go to Donorbox and its payment processors, never to us. See Donorbox’s privacy policy.
The complete list of cookies this site can set:
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
_ga, _ga_* | Google Analytics | Tells returning browsers apart for traffic measurement. Set only after you choose Allow in the consent card; removed again if you later decline. | 2 years |
__cf_bm, cf_clearance | Cloudflare | Bot protection during and after a Turnstile check. Strictly functional; no tracking. | 30 minutes / up to a year |
Everything else lives in your browser’s local storage and never leaves your device: your consent choice, the notification opt-in, interface preferences, conversion history and the wallpaper cache. Clearing the site’s data removes all of it.
If you email us (for example contact@mp3fy.com), your message is stored on infrastructure we rent from Cloudflare, encrypted at rest. What happens to it:
- Retention. Ordinary correspondence is kept for up to 3 years, deleted messages and spam for 30 days, and unsent drafts for 30 days after their last edit. Legal correspondence (for example copyright notices) may be kept longer and can be frozen under a legal hold while a dispute is open.
- An AI assistant reads mail. Software, including an AI assistant, may read incoming mail to categorize it, summarize it and prepare draft replies. The assistant cannot send email: every message that leaves an @mp3fy.com address is reviewed and sent by a named human.
- Erasure, honestly stated. If you ask us to erase your messages, they are removed from live storage immediately and from daily backups within 35 days. Weekly and monthly backup archives expire on their own cycles, so index metadata about an erased message (sender, subject, a short excerpt) can persist in a sealed archive for up to 36 months. Erased messages are recorded in a deletion register that is re-applied whenever a backup is restored, so a restore never brings an erased message back. Messages under a legal hold cannot be erased until the hold is lifted.
Questions
Email contact@mp3fy.com.