Privacy Policy

1. Information We Collect

When you use our free image converter, we collect minimal information necessary to process your images and improve our service.

Uploaded Images: We temporarily store your uploaded image files on our server exclusively for the purpose of converting, compressing, and processing them. These files are automatically deleted within a short time after processing, typically within 1 to 24 hours.

Usage Data: We may collect non-personal information such as your IP address, browser type, device type, referring pages, and timestamps. This data is used for security, rate-limiting, abuse prevention, debugging, and aggregated analytics.

Session Data: We use session cookies to associate uploaded files with your browser session. These cookies do not contain personal information and expire when you close your browser.

2. How We Use Uploaded Images

Processing: Uploaded images are processed on our server using image-processing libraries (GD or Imagick) to perform the format conversion, compression, resizing, or other operations you request.

Temporary Storage: Original uploaded files and processed output files are stored in temporary directories on our server. They are never shared, sold, or used for training AI/ML models.

Automatic Deletion: Temporary files (originals and converted outputs) are automatically deleted by our scheduled cleanup mechanisms. We do not retain copies of your images after cleanup.

No Review: We do not manually review, open, or examine uploaded images unless required by law or to investigate abuse or technical problems.

3. Cookies and Session Storage

We use a small number of cookies and similar technologies to make our tool function properly.

Session Cookies: A single session cookie is used to maintain your session state while using the converter. This enables features like batch uploads and CSRF protection. The cookie is automatically deleted when you close your browser.

CSRF Tokens: We use CSRF tokens embedded in the page to protect against cross-site request forgery attacks. Tokens are tied to your session.

Third-Party Analytics: If configured in our environment variables, we may use Google Analytics or Google Tag Manager for aggregated, anonymous usage analytics. You can block these via your browser settings or ad-blockers.

4. Data Sharing and Disclosure

We do not sell, rent, or share your personal information or uploaded images with third parties for commercial purposes.

We may share limited information only in the following circumstances:

Legal Requirements: If required by law, court order, subpoena, or government request, we may disclose information as necessary.

Service Providers: We may use cloud or hosting providers who have access to infrastructure. All such providers operate under appropriate data protection obligations.

Protection of Rights: We may disclose information to enforce our Terms of Service, protect our systems and users, or investigate fraud, security, or technical issues.

5. Data Retention and Deletion

Temporary image files (both original uploads and converted downloads) are automatically deleted from our servers after processing. Typical retention is between 1 and 24 hours depending on cleanup cycles.

Database records of conversions (metadata only, not the actual images) are retained for a limited period (typically 24-72 hours) for logging, debugging, and abuse prevention before being purged.

Analytics and access logs may be retained for up to 30 days to monitor service health and detect abuse.

If you believe we might have any information from or about you, please contact us and we will assist with any deletion requests permitted by law.

6. Security

We implement industry-standard security practices to protect uploaded data, including: HTTPS/TLS encryption in transit, CSRF protection, file type validation, randomized file names, restricted upload directories with PHP execution disabled, rate limiting, and proper input/output sanitization.

While we work hard to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. Please do not upload sensitive, confidential, or illegal images.

7. Children's Privacy

Our service is not directed to children under the age of 13, and we do not knowingly collect personally identifiable information from children under 13.

8. Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, or delete personal data we hold about you, or to object to or restrict certain kinds of processing.

To exercise these rights, or if you have any privacy-related questions, please contact us using the contact information below.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will be revised accordingly. Changes are effective immediately upon posting.

10. Contact

For questions about this Privacy Policy, our data practices, or to exercise your rights, please contact us through the contact information available on our website.