Privacy

Converts.to is operated by CROapps Oy, a limited company registered in Finland. For the purposes of the EU General Data Protection Regulation, CROapps Oy is the data controller for the very small amount of data described on this page.

Written enquiries about this policy, including requests to exercise the rights described below, can be sent to the registered address above.

Every conversion, compression and edit on this site runs inside your browser tab. When you select a file, the browser reads it from disk into memory on your own device, does the work there, and writes the result back out as a download. The bytes of your file are never transmitted to us or to anyone else.

This is a property of how the site is built rather than a promise about how we behave. There is no upload endpoint, no processing queue and no storage bucket, so there is no copy of your file for us to keep, lose, hand over or be compelled to produce.

You do not sign up, so we hold no name, no email address and no password. We do not use analytics of any kind. There is no measurement script, no tag manager, no advertising pixel, no session recording and no fingerprinting. We do not set cookies for tracking, and we do not build a profile of you or share anything with a third party for their own purposes.

The site loads no scripts, fonts or images from anyone else's servers. Everything it needs is served from this domain, so no third party is contacted by your browser as a result of you visiting.

The site is delivered by Cloudflare. Like any web server, it processes the technical details of a request in order to answer it: your IP address, the page requested, the time, and your browser's user agent string. This is necessary to deliver the site and to defend it against attack and abuse.

The legal basis is our legitimate interest in operating and securing the service under Article 6(1)(f) of the GDPR. These records are short lived, are not combined with anything else, are not used to identify or profile you, and are never used for marketing. They tell us nothing about what you converted, because the conversion never reaches a server.

Some things are saved locally by your browser so the site is pleasant to use. Your settings for a tool, such as a chosen quality level, are remembered so you do not have to set them again. Files you add to the workspace are held in your browser's private storage so they survive a reload.

All of that lives on your device and is readable only by this site in your browser. It is never sent to us and we have no way to see it. You can remove it at any time by clearing the workspace, or by clearing site data in your browser settings.

Under the GDPR you have the right to access the personal data held about you, to have it corrected or erased, to restrict or object to its processing, and to data portability. In practice we hold almost nothing: with no account and no analytics, there is usually no record connected to you beyond short lived technical logs.

You also have the right to lodge a complaint with a supervisory authority. In Finland that is the Office of the Data Protection Ombudsman.

If this policy changes, the revised version will be published on this page with a new date. The commitment that your files are never uploaded is structural, so it is not something a future revision can quietly withdraw without rebuilding the site around a server.

Last updated 22 August 2026.