How to analyze a WhatsApp chat without giving it away

Exporting a group chat takes ten seconds. What ends up in that file is another story: every message, every name, every late-night confession that the group sent since you joined. Before you drop it into any “analyze my WhatsApp” website, it is worth knowing what could happen to it and how to check for yourself.

Why a chat export is more sensitive than it looks

When you use Export chat in WhatsApp, you get a plain .txt file (or a .zip with the .txt inside, plus media if you chose to include it). That text file is not encrypted. Anyone who gets it can read it in a notepad. Typically it contains:

• Every message with its date, time and author. Not only yours: the whole group’s.
• Names as saved in your phone, which can be nicknames other people never agreed to.
• Phone numbers. People you have not saved as contacts often appear as their number, and numbers also show up inside messages (“call me on…”, @mentions of non-contacts).
• Personal details people share casually: addresses, emails, links to shared documents, health updates, money matters.

In other words, the file is mostly other people’s data. That is the key point for everything below.

The group’s consent comes first

Legally and socially, the safest habit is simple: ask the group before you analyze or share anything about it. A quick “I’m going to make a Wrapped of this group, anyone mind?” is usually met with enthusiasm, and if someone objects, you have avoided a problem.

Consent matters at different levels:

What you do	Who sees the result	Consent worth asking for
Stats that never leave your browser	Only you	Low risk, but still polite to mention
Sending text to an AI service	You, plus the AI provider processing it	Yes, from everyone in the group
Sharing a link or screenshots	Anyone who receives it	Yes, and check what is visible

Also note that WhatsApp itself lets people opt out. Since 2025 there is a setting called Advanced Chat Privacy (tap the chat name to find it) that, when switched on in a chat, blocks members from exporting it. If you cannot find Export chat for a group, that may be why, and it is a clear signal about what that group wants.

What “processed in your browser” means, and how to check it

Many tools claim your chat “never leaves your device”. That is a real technical possibility: modern browsers can read a file you select and run all the counting in JavaScript, locally, without uploading anything. The problem is that a claim is just a claim. Two checks anyone can do:

Check 1: watch the network tab

1. On a computer, open the analyzer page in Chrome, Edge or Firefox.
2. Press F12 (or right-click and choose Inspect) and open the Network tab.
3. Click the clear button so the list is empty, then select your chat file.
4. Look at the requests that appear while it analyzes. Sort by size. A request roughly as big as your file (an export without media is often a few megabytes) going to a server is a red flag. Small requests to analytics or ad services are normal on many sites; click one and look at its Payload to see what it carries.

Check 2: go offline

Load the page, wait until it has fully loaded, then turn off wifi and mobile data and select the file. If the analysis still works, it clearly does not depend on a server. One caveat: some sites load extra pieces of code on demand, so a failure offline is not proof of an upload. The network tab is the more reliable test.

What Chat Recap does with your file

Since this guide lives on Chat Recap’s site, here is exactly how this tool handles it (you can verify all of it with the checks above):

• The file is read in your browser. A .txt or .zip is opened in memory; from a .zip only the chat’s text file is read (for voice notes, only the file header is read to get their length; photos and videos are never opened). Every statistic, award, leaderboard, emoji and word count is computed by code on your device.
• Phone numbers are removed early. Participants who appear as a number are renamed “Contact 1”, “Contact 2”… and long numbers typed inside messages are replaced before any analysis runs.
• Nothing is saved. The chat text is not stored in a database or in your browser’s storage. Once the analysis is done, the original text is discarded and what remains lives in memory until you close the tab.
• The free part sends nothing. The full report, the Wrapped and the PDF are generated locally.

The optional AI analysis

The AI analysis is the only paid feature (3 €) and only runs if you tick a box confirming you have the permission of every group member. Before anything is sent, your browser prepares the text:

• Names are replaced by pseudonyms (P1, P2…), including when they appear inside messages. The table that maps P1 back to a real name never leaves your browser; the real names are put back locally when the results arrive.
• Phone numbers, email addresses, links and @mentions are redacted. Deleted messages are skipped, and media becomes a <media> marker.
• Very long chats are capped at 120,000 characters of text, keeping whole days spread over the history plus the busiest days.

After it runs, the report’s privacy section has a See exactly what was sent button showing the full payload. The server forwards it to the AI model and does not store it. The privacy policy names the AI providers and their terms.

Share links, analytics and ads

If you share the Wrapped or create a Who said it? game, the content is encrypted in your browser and an encrypted copy is stored for 90 days. The key sits after the # in the link, a part of the URL that browsers never send to the server, so the server cannot read it. Anyone with the link can, though, which is why the game lets you remove messages before generating it.

Usage is counted with Umami, a cookieless analytics tool hosted on Chat Recap’s own servers, which records counters and coarse data (language, country, device), never chat content. The site also shows Google ads on some pages; ads never receive anything from your chat.

A checklist for any chat analyzer

Use this before uploading a chat to any tool, including this one:

1. Does it say where processing happens? “In your browser” or “on our servers” should be explicit, not buried.
2. Does the network tab agree? No large upload when you select the file.
3. Does it need an account or your phone number? A stats tool has no reason to.
4. Does it ask to connect to your WhatsApp account or scan a QR code to “link a device”? That gives far more access than a one-off export. Avoid.
5. If AI is involved, what exactly is sent? Look for pseudonymization, removal of numbers and emails, and a way to see the payload.
6. Which AI provider, and under which terms? Whether they train on your data should be stated.
7. How long is anything kept? Shared links should expire; uploaded files should not be kept “to improve the service”.
8. Is there a real privacy policy with a company name and a contact address?

If a tool fails points 3 or 4, close the tab.

Good habits after the analysis

• Delete the export. The .txt or .zip usually lands in Downloads, in your Files app, or in whatever app you sent it to. If you emailed it to yourself, delete that email too.
• Export without media. Choosing Without media gives you a much smaller file and keeps private photos out of it entirely. The stats barely change.
• Check screenshots before posting. Award cards and quotes can contain names and real messages. Crop or skip anything that would embarrass someone outside the group.

Next step: if you have not exported your chat yet, follow the export guide, then open the analyzer with the Network tab visible and watch for yourself what leaves your browser.