The short version

Image, PDF, audio, video and OCR conversions run entirely inside your browser. The file never leaves your device and is never uploaded to us. A small set of heavy formats (Office documents, camera RAW, archives, ebooks, fonts) are processed by our conversion worker for the length of a single request and deleted the instant it finishes. We keep no copy of any file, ever.

Files you convert

On-device conversions. When a conversion runs on your device (shown as “on-device” in the app), the file is read into your browser’s own memory, converted there, and offered back to you as a download. No bytes are sent to our servers. You can verify this: the app shows “Uploaded to server: 0 B” and makes zero network requests during the conversion.

Worker conversions. For formats the browser cannot handle, the file is sent over an encrypted connection to our conversion worker, converted in an isolated, per-job temporary directory, returned to you, and then that directory is destroyed. Nothing is written to permanent storage and nothing is logged except a job identifier and timing. There is no retention policy to get wrong because there is nothing retained.

Information we collect

Analytics. We use privacy-friendly, cookieless analytics to count page views and understand which conversions are popular. It does not use tracking cookies, does not build a profile of you, and does not follow you across other sites.

API accounts. If you create an API key, we store a one-way hash of the key (never the key itself), your plan, and a running count of your monthly usage so we can enforce quotas. We do not inspect the contents of files sent through the API.

Billing. Paid plans are handled by Stripe. Your card details go directly to Stripe and are never seen or stored by us. We store only Stripe’s customer and subscription identifiers so we can apply the right plan to your key.

Preferences. Your light/dark theme choice is stored in your browser’s local storage on your own device. It never reaches us.

What we do not do

We do not sell your data. We do not show ads. We do not use your files to train anything. We do not require an account to convert files. We do not apply watermarks.

Service providers

We rely on a small number of processors: Vercel (website hosting and cookieless analytics), Google Cloud Run (the conversion worker, transient processing only), Stripe (payments), and Supabase (storage of hashed API keys and usage counts). Each processes data only to provide its part of the service.

Data retention

Converted files: not retained — on-device files never reach us, worker files are deleted at the end of each request. API usage records: retained while your account is active and for as long as needed for billing and abuse prevention, then deleted on request.

Your rights

Because we hold almost no personal data, there is little to access or erase. If you have an API account, you can ask us to delete it and its usage records at any time by contacting us.

Children

SafeConvert is a general-purpose tool and is not directed to children under 13.

Changes

If this policy changes we will update the date at the top of this page. Material changes to how we handle data will be announced on the site.

Contact

Questions about privacy? Email support@safeconvert.app.

See also our Terms of Service.