privacy policy

Privacy Policy

Last updated: 19 May 2026. Short version: your files never leave your device, we use one anonymous cookieless analytics tool (Plausible), and we never share, sell, or transmit anything we don't have to.

TL;DR

  • Your files are never uploaded. Every conversion happens entirely inside your browser using WebAssembly.
  • We use Plausible Analytics for anonymous pageview counts. No cookies. No fingerprinting. No personal data.
  • We do not use Google Analytics, Facebook Pixel, Hotjar, Microsoft Clarity, Mixpanel, or any other third-party tracker.
  • We do not collect: file names, file hashes, file contents, file sizes, IP addresses, email addresses, accounts, or anything else identifying you personally.
  • We do not sell data to anyone. We do not have data to sell.

How file conversion works (and why we can't see your files)

Every converter on PrivateConvert is a static HTML page that loads an open-source WebAssembly library (such as heic2any for HEIC decoding) into your browser. When you drop a file onto a converter:

  1. Your browser reads the file into its own memory using the FileReader API.
  2. The WebAssembly library decodes and re-encodes the file on your CPU.
  3. The result is handed back to you as a download.

At no point in this process does the file leave the privacy sandbox of your browser tab. There is no "upload" endpoint on our servers because we don't process files server-side.

How to verify this yourself: Open your browser's DevTools, switch to the Network tab, drop a file. The Network tab stays empty. Or load the page, turn off your wifi, drop a file — it still works.

What we collect — Plausible Analytics

We use Plausible Analytics (Business plan, EU-hosted) to count anonymous pageviews. This is the only client-side analytics tool on this site.

What Plausible records

  • The URL of the page you visited (e.g. /heic-to-jpg-offline/)
  • The referring website (e.g. google.com)
  • Your country (derived from IP at request time, then discarded)
  • Your device class (mobile / tablet / desktop)
  • Your browser and operating system (e.g. "Firefox on Linux")

What Plausible does NOT do

  • No cookies. Plausible sets zero cookies. None.
  • No personal data. No name, email, account, profile, anything.
  • No IP storage. Your IP address is used momentarily to derive country, then discarded. It is never stored.
  • No fingerprinting. Plausible does not generate a device fingerprint or cross-site identifier.
  • No cross-site tracking. Plausible cannot follow you between websites.

Plausible is GDPR, PECR, and CCPA compliant by design — that's why we don't need a cookie banner on this site. There is no "consent" to ask for because there's nothing being stored on your device.

You can read Plausible's full data policy here: plausible.io/data-policy.

What our hosting provider (Netlify) sees

This website is hosted on Netlify. When you request a page, Netlify's edge servers see your IP address and the URL you requested — that's standard for any web hosting and required for the internet to function. Netlify retains aggregated, anonymized logs for operational and security purposes.

Crucially: Netlify never sees your file content, because your file content is never sent to any server. Netlify only serves the static HTML, CSS, JavaScript, and WebAssembly that make up this site.

Netlify's privacy practices: netlify.com/privacy.

Affiliate links

Some pages on this site contain affiliate links to third-party products — for example, encrypted cloud storage services. When you click an affiliate link and sign up, we may earn a small commission, at no extra cost to you. Affiliate clicks are tracked by the affiliate program operator (not by us) using their own redirect URL. We don't see who clicked, when, or whether the click converted — we only see aggregate commission reports.

We only recommend products we'd use ourselves, and affiliate links are always disclosed.

Cookies

This site does not set any cookies. Zero. Verify in your browser's DevTools → Application → Cookies — the list for privateconvert.net will be empty.

Local storage

This site does not write to your browser's localStorage, sessionStorage, or IndexedDB. Some browsers may briefly cache the static HTML/CSS/JS/WASM files for performance — that's standard browser behavior and not something we control or use to track you.

Your rights

Because we don't collect personal data, there's nothing to access, correct, export, or delete on our end. If you have any questions about this policy, contact us via the contact page.

Changes to this policy

If we ever change what we collect or how we collect it, this page will be updated and the "Last updated" date at the top will change. We will never quietly add tracking. If you want to verify the current state of what we use, open this site's <head> in DevTools — it's all there in plain sight.

Contact

Privacy questions: contact page.