Privacy
Yalla is a tool, not a service that collects users. This page says exactly what it touches, for how long, and what it never does.
The short version
- No accounts, no sign-up, no email. There is nothing to create and nothing to remember you by.
- No analytics of our own. No tracking pixels, no session recording, no fingerprinting.
- Files self-delete. Anything the engine produces is removed after an hour, or sooner if you cancel.
- It's open source. Every claim here can be checked in the code.
What the engine handles
When you paste a link or drop a video or audio file, it goes to the machine running Yalla (the “engine”) so it can fetch, convert and hand the result back. During that time the engine holds:
- The link or file you gave it, and the result — on disk only while the job runs and for the delete window above. Nothing is copied elsewhere, and nobody browses it.
- A hashed version of your IP address — kept in memory, never written down, used only to cap how many jobs one person can queue at once. The hash can't be turned back into your address.
- Error logs when something fails, so it can be fixed. They record what went wrong with a job, not who ran it.
The image converter is different: it runs entirely inside your browser tab. Photos never leave your device at all, so nothing above applies to them.
Your browser
Yalla stores two small preferences on your device (your theme and whether you dismissed the bookmark hint) using your browser's local storage. They never leave the browser, and clearing site data removes them.
Infrastructure
The public site is served by Vercel, and the engine is reached through Cloudflare. Like any host, both see ordinary connection details (IP address, browser type, the page requested) and keep short-lived edge logs under their own policies. Yalla does not read or export those logs.
Running it yourself
If you self-host Yalla, none of the above involves us at all — every link, file and log stays on your own machine. The README covers setup.
Questions
Open an issue on GitHub or reach Omar Abi Akar there. If this page ever stops matching what the code does, that's a bug — please report it.
Last updated September 15, 2026.