Side Whisper keeps your browsing and your voice on your PC. The account service handles sign-in, your plan, your devices and, with Pro, a synced copy of your sidebar and settings. This page shows what stays where, and how web content is kept at arm’s length.
01 — THE BOUNDARIES
Sign-in proves who you are. The account service then checks your user, plan and device permissions on the server for every protected action.
Build downloads, device changes and plan changes each check access on their own, so one allowed step never opens another.
Web content runs in sandboxed, isolated renderers. It never receives the privileged bridge the app uses for its own windows.
Browsing history, website sessions and cookies, site permissions, recordings, transcripts and game telemetry stay on your PC. With Pro, Sync copies your sidebar, templates, themes, Dictionary, Snippets and portable settings to your account.
Sign-in codes expire after 10 minutes, allow three tries and are stored hashed. Sign-in is rate limited per address and per network.
Side Whisper ships through the Microsoft Store, which checks, signs and delivers every update.
02 — WHAT STAYS ON YOUR PC
It exists for identity, consent, your plan, your devices and, with Pro, Sync. Sync never carries browsing history, website cookies, transcripts or performance data.
What does leave your PC on its own: text you type in the address bar, Add link and Quick Search goes to DuckDuckGo for suggestions, and the ad blocker downloads its filter lists when Side Whisper starts. The Privacy Policy lists every case.
03 — CONTROLS YOU CAN SEE
If a control can’t be enforced, it isn’t shown. If a number isn’t available, it isn’t guessed.
Blocking uses the Ghostery engine with the ad lists from EasyList, Peter Lowe and uBlock Origin. The shield in the toolbar turns it on or off, and shows how many requests it actually blocked across your sites.
It blocks network requests only, so pages are never restyled. Lists are pinned, checked against a SHA-256 hash and updated with the app.
When a site asks for the camera, notifications or screen sharing, Side Whisper asks you first, and each answer does exactly what it says.
Closing the prompt saves no choice. Site settings list every site as Ask, Allowed or Blocked, and can reset permissions.
Turn it on in Settings, then press Alt+Shift+H. Side Whisper closes browser popups, mutes the active browser window and covers its page with a safe page you chose. Press the key again to restore everything.
Free, and off by default. It covers the page, not the tabs or the address bar.
04 — WHERE EACH THING LIVES
05 — HOW THE WEBSITE IS SECURED
The website follows current guidance for its framework and sign-in provider and the OWASP ASVS 5.0 requirements, and the app follows Microsoft Store policy.
Please tell us privately before you share it publicly. Email support@sidewhisper.app with the steps to reproduce it.
This page describes the current architecture and the intent behind it. It is not a certification, a penetration-test report, a warranty, or a guarantee that a vulnerability cannot exist.
SEE FOR YOURSELF
