Privacy policy

Last updated: October 2026

The short version

Your files never leave your device. Every converter on this site runs entirely inside your web browser. There is no upload step, no server-side processing, and no copy of your file anywhere but your own disk. This isn't just a policy promise — it's how the software is built, and you can verify it yourself (see below).

What we do not collect

Your files. Conversion happens locally via JavaScript, WebAssembly, and your browser's own image engine. File bytes are never transmitted over the network.
Accounts. There is no registration, login, or user profile of any kind.
Tracking cookies. This site sets no first-party cookies.
Files and file-specific metadata. We never receive file contents, names, sizes, or types. We do not use accounts or cross-site profiles. Umami may group pageviews and conversion outcomes within an anonymous site session, as described below.

What may be processed

Standard server logs. Our hosting edge (Cloudflare and a static file server) may keep short-lived, aggregate logs of page requests — URL, timestamp, browser type — for reliability and abuse prevention. These logs can never contain your files, because files are never sent.
Advertising (planned). We intend to show Google AdSense ads to keep the site free. If enabled, Google may set its own cookies and collect data underGoogle's privacy policy. Conversion functionality never depends on ad scripts, and the site works fully with an ad blocker.
Aggregate analytics (Umami). We use Umami for pageview and path-change analytics on this domain, plus custom conversion events with outcomes `started`, `completed`, `failed`, and `downloaded`. The `downloaded` outcome records a click on a download control; it does not confirm the browser saved the file. Each conversion event includes only the tool slug and outcome. We also record a few site-navigation events: clicks on our main buttons (button label), on links to other websites (the destination address without its query string), on email or phone links (only which kind of link, never the address or number), how far down a page you scrolled (25, 50, 75 or 100%), visits to missing pages (the path), and searches and format requests (only the recognised format names, such as "AVIF to JPG", and whether we had a converter; never the text you typed or the note you wrote). A format request is an email you send from your own email app, so it reaches us like any other email. Umami may process page URL, referrer, browser language, screen dimensions, browser/OS/device, approximate country of origin, event time, and an anonymous session identifier that groups activity during a visit. The tracker respects browser Do Not Track. No file names, sizes, types, or contents are sent. Conversion functionality does not depend on analytics.
Affiliate links. Files over a tool's size limit trigger an offer card linking to a third-party server-side converter. That link is clearly labeled. If you choose to use it, that service's privacy policy applies to anything you upload there — by definition, nothing is sent to them unless you click and upload yourself.

Verify it yourself

Don't take our word for it. Press F12, open the Network tab, and convert a file: you will see no request carrying your file's data. Stronger still — load a converter page, disable your internet connection, and the conversion still works. Software that functions offline cannot be uploading anything.

Data retention

Files are never stored on our servers. They remain in your browser's memory until you download them or close/reload the page. Umami analytics for convertallfiles.app are stored on our self-hosted analytics server and purged daily after they become older than 12 months. This retention applies only to convertallfiles.app and does not change retention for other sites on the shared analytics instance. The analytics records do not contain file names, types, sizes, or contents.

Changes & contact

If this policy changes, the update date above will change with it. Questions:[email protected].