Privacy Policy

Your images

Every conversion runs inside your browser. When you open a file it is read through the browser's File API, decoded onto a canvas, and processed by a Web Worker on your own hardware. The result is drawn back to a canvas and saved by your own browser when you click download.

At no point does the image become a network request. We operate no upload endpoint and no processing queue, so there is no server that could hold a copy even briefly. You can verify this yourself: open your browser's developer tools, switch to the Network tab, and convert an image — no request carrying your file will appear.

Because we never receive your images, we cannot recover one for you if you lose it, and we have nothing to disclose if we are ever asked to hand images over.

Cookies and local storage

This site sets no cookies. It writes nothing to local storage, session storage, or IndexedDB.

Your settings — pixel size, palette, dithering, export size — live in memory for as long as the tab is open and are gone the moment you close it. That is also why you see no cookie banner here: there is no consent to collect, because there is nothing to consent to.

Server logs

The pages themselves are files delivered over the internet, so our hosting provider, Cloudflare, Inc., records a standard access log for each request: IP address, timestamp, the URL requested, HTTP status code, user agent, and referring page. This is the log every web server keeps; it is what makes it possible to detect abuse and diagnose an outage.

These logs contain no image data. They are retained by the hosting provider under its own retention schedule, and we do not combine them with anything else, sell them, or use them to build a profile of you.

Analytics

We count page views using Plausible, an open-source analytics program that we run on our own server rather than buying as a service. It is cookieless: it stores nothing on your device, keeps no identifier that persists between visits, and cannot follow you to any other site. That is why you are not asked for analytics consent here — there is no tracking to consent to.

Separately, our hosting provider Cloudflare measures how quickly pages load for real visitors. It adds a small script to each page that reports timings — how long the page took to become visible and responsive — along with the page URL, browser, and country. That measurement is also cookieless and carries no identifier that would let one visit be linked to another. We use it only to find slow pages.

Each page view records the URL you landed on, the site that referred you, and a few coarse attributes derived from the request your browser already sends: browser, operating system, device type, and country. Your IP address is used to derive the country and is not stored.

Everything is aggregated. We see that a page was viewed; we cannot pick you out of the total, reconstruct your path across days, or connect a view to a person. There is no Google Analytics, no tag manager, and no advertising pixel on any page.

No analytics event contains your images or anything computed from them. Your images are never sent anywhere, so there is nothing about them for analytics to report.

Advertising

This site currently shows no advertising and loads no ad-network code.

We do intend to fund the free tools with advertising. Before a single ad appears, this section will be rewritten to name the network, list the cookies and identifiers it uses, and link to the opt-out — and visitors in regions where consent is required will be asked before any ad code loads. Ad networks never receive your images, because your images never leave your device in the first place.

Your rights

Under the GDPR, the UK GDPR, and the CCPA you have the right to access, correct, delete, and port the personal data a service holds about you, and to object to its processing.

In practice there is very little here to exercise those rights against. We hold no account, no email address, no image, and no identifier that ties one visit to another. The only personal data connected to you is the IP address in our hosting provider's access logs.

If you want to know whether a particular address appears in those logs, or want an entry removed, write to us and include the address and an approximate time window — without both there is nothing to search for.

Children

These tools are not directed at children under 13, and we knowingly collect no personal information from anyone of any age. No account can be created, so an age is never asked for and never stored.

Changes to this policy

When this policy changes, the date at the top of the page changes with it. Material changes — in particular the introduction of advertising or analytics — will be written into the relevant section above rather than folded silently into the surrounding text.