Privacy policy

Your files

Files you add to a converter are processed in your browser. They are not uploaded to our servers and we cannot see them. Closing or reloading the page discards them from memory. The converters load their code and, for text recognition, language data from this site only.

Who is responsible

The controller of personal data on this site is the operator of the site, a private individual, who can be reached by email. Email: contact@convertinplace.com.

Data processed when you visit the site

When you open a page, your browser requests it from the server of our hosting provider, Cloudflare. The request contains technical data such as your IP address, the time of the request, the page or file requested, the type of browser and device (user agent) and the page you came from. This data is needed to deliver the site, keep it secure and stop abuse.

The legal basis is our legitimate interest in running a working and secure website (Article 6(1)(f) GDPR). We do not use this data to identify you or to build profiles, we do not combine it with other data, and the site has no analytics or tracking tools beyond the anonymous usage counter described below. Cloudflare keeps this data for the periods set out in its own policies.

Anonymous usage counter

When a conversion has finished, the page sends one small message to our own server (the same Cloudflare site, address /api/hit) saying which converter was used, the language of the page and how many files were processed, for example "heic-to-jpg, en, 1". The message contains no file, no file name, no file content and no identifier, and it sets no cookies. We store only daily totals per converter and language. We do not store your IP address, user agent or any other detail in this counter; as with every request, the server handling it sees your IP address while it delivers the request (see above), and it is used only to limit abuse.

We use the totals to see which tools are used so that we can maintain and improve them. The legal basis is our legitimate interest in running and improving the site (Article 6(1)(f) GDPR). The totals are not personal data because they cannot be linked to you. If your browser sends the Do Not Track or Global Privacy Control signal, the page does not send the message at all. You can also block the request to /api/hit in your browser or with a content blocker; the converters keep working.

If you write to us

If you send an email, we process your email address and the content of your message in order to reply. The legal basis is our legitimate interest in answering enquiries (Article 6(1)(f) GDPR) or, if you ask about a business arrangement, steps taken at your request before an agreement (Article 6(1)(b) GDPR). We keep the correspondence as long as needed to deal with your request and to meet legal duties, then delete it. Please do not send private files.

Recipients and transfers outside the EEA

Our hosting provider, Cloudflare, Inc. (San Francisco, USA), receives the technical data described above and processes it on our behalf. Because the provider is based in the United States, data can be transferred there. Cloudflare participates in the EU-U.S. Data Privacy Framework, and where needed it also relies on the Standard Contractual Clauses adopted by the European Commission. See Cloudflare's privacy policy.

Advertising

The site currently shows no ads and sets no advertising cookies. If advertising such as Google AdSense is added later, this page will be updated before it goes live and a consent tool will be shown where the law requires it.

Cookies and local storage

The site sets no cookies and does not store information on your device. The page loads code (JavaScript and WebAssembly) that runs in your browser to convert files; this code does not read or write cookies or local storage and does not send your files anywhere. Your browser may keep copies of the page and its files in its normal cache.

Your rights

You have the right to ask us for access to your personal data, for its correction or deletion, for restriction of its processing, and to object to processing that is based on our legitimate interests. Where processing is based on your consent, you can withdraw it at any time. Where it applies, you also have the right to receive your data in a portable format. To use these rights, write to us at the address above.

You also have the right to lodge a complaint with a data protection authority, in particular in the country where you live, work or where you think your rights were infringed. You can find the authorities in the EU on the European Data Protection Board website; in the United Kingdom it is the Information Commissioner's Office.

Providing data and automated decisions

You do not have to provide personal data to use the converters. The technical data described above is needed for the server to deliver the page. We do not make decisions about you by automated means and we do not profile you.

Children

The site is not directed to children and we do not knowingly collect their personal data.

Changes and contact

We may update this policy and will change the date above when we do. Questions: contact@convertinplace.com.