Privacy
A simple declaration: your audio is yours, your network is yours.
Data Collection and Telemetry
WFAS does not collect, store, or transmit any personal data.
There are no analytics trackers, no crash reporting tools, and no "phoning home". The application does not include any third-party advertising SDKs. The only external request the Desktop app makes is a standard HTTPS call to the GitHub API to check for new releases.
QR Code Invites and Pairing
When generating an invite via QR code, the pairing key is transmitted via a URL fragment (the part after the # symbol). By web standards, URL fragments are processed entirely by your browser and are never sent to the network. This guarantees that your 256-bit encryption key remains locally on your device and is mathematically impossible for us or any intermediary to log or intercept.
Audio Routing
Your audio data is transmitted strictly over your Local Area Network (LAN) directly between the devices you pair. It never passes through a cloud server or an external relay. If you enable encryption, the stream is secured end-to-end with ChaCha20-Poly1305.
Android Permissions Explained
Due to Android's security model, capturing system audio requires sensitive permissions. Here is exactly why WFAS requests them:
Screen Recording / Media Projection
Required on Android 10+ to capture the internal audio of other apps (like Spotify or games). WFAS does not record your screen or camera. It only instructs the Android MediaProjection API to extract the audio stream.
Microphone
Requested only if you choose to use your phone as a wireless microphone. The microphone is never accessed in the background without the foreground service notification visible.
Because the entire project is open source, these claims are permanently verifiable by inspecting the source code on GitHub.