Privacy Policy
Your images never leave your device. This policy explains the limited data that is processed when you visit Convertisio, by whom, why, and the choices you have.
Last updated:
The short version
- Your images stay on your device. Conversion happens in your browser. Your images are never uploaded, and we never receive, store or see their contents or their file names.
- No account, no sign-up. You do not give us your name or email address to use the converter.
- Some technical data is needed to deliver the website. Our hosting provider, Cloudflare, processes your IP address and request data to deliver pages and protect the site from abuse.
- Advertising and analytics are third-party services. They may process data such as your IP address and cookie identifiers, and the ones that require consent only run after you agree.
- You have rights under the GDPR, explained below.
Who is responsible for your data
The controller responsible for personal data processed through Convertisio (https://convertisio.eu) is:
- Aissa Scarmure
- Rue de la Station 58, 1360 Perwez, Belgium
- Email for data protection requests: [email protected]
- Hosting provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA
Convertisio offers no customer support service. The email address above is only for data protection requests and legal notices.
In this policy, "we" and "us" mean the controller. We have not appointed a Data Protection Officer, because the law does not require one for an activity of this kind.
Your images are processed locally and never uploaded
When you convert an image, the work is done by your own browser on your own device: the browser decodes the file and re-encodes it in the new format inside a Web Worker (a background thread of the page). Your image files are never uploaded to Convertisio or to anyone else. Convertisio has no backend server and no database for images, so we never receive, store or see the contents of your images or their file names.
Converted files exist only in your browser's memory until you download them, remove them, start a new batch, or close or reload the tab. Converted files do not carry over the original's EXIF metadata, such as camera details or GPS location.
Advertising and analytics
We use the third-party services described below. They may process technical and personal data about your visit, such as your IP address, device and browser information, cookie or device identifiers, the pages you visit, and your interactions with ads. Services that store or read cookies or similar identifiers on your device, or that use your data for advertising, are only loaded after you give consent. Refusing is as easy as accepting, and the converter works the same either way.
Before downloads: Before each download, a short video ad is shown. If no video is available, if your browser blocks it, or if you refuse advertising cookies, you simply wait a few seconds instead: the download is never withheld.
An honest note about third-party scripts
Like on any website that uses such services, these providers work by running their own scripts inside the Convertisio page. Convertisio does not pass them your files, your file names or any image data. Our analytics events contain only technical facts: the source and target format, whether a conversion succeeded or which category of error occurred, the number of files, and coarse file-size ranges. What each provider does with the data it collects is governed by its own privacy policy, linked below. If you reject optional cookies, the scripts that need your consent are not loaded.
What we process, why, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Delivering the website and keeping it secure (hosting by Cloudflare) | IP address, requested page, date and time, browser user agent, referring page, security signals | Legitimate interests, Art. 6(1)(f): delivering the website reliably and protecting it against attacks and abuse |
| Remembering your settings and cookie choices | Small items stored only in your browser (see "What Convertisio stores in your browser"); never sent to us | Legitimate interests, Art. 6(1)(f), and our legal obligation to respect your consent choices, Art. 6(1)(c) |
| Showing ads (Adsterra) | IP address, device and browser information, cookie identifiers, pages visited, ad interactions | Consent, Art. 6(1)(a) |
| Answering data protection requests | Your email address, name if given, and your message | Legal obligation, Art. 6(1)(c) |
Where we rely on legitimate interests, you can object at any time (see "Your rights"). Where we rely on consent, you can withdraw it at any time; this does not affect processing that took place before you withdrew it. The use of cookies and similar technologies is also governed by the ePrivacy rules (Article 5(3) of the ePrivacy Directive, as implemented in Belgian law): consent is required except for storage that is strictly necessary for a service you have asked for.
Hosting and security: Cloudflare
Convertisio is hosted on Cloudflare Pages and delivered through Cloudflare's network (Cloudflare, Inc., USA). Like any web host, Cloudflare must process your IP address and request data (the page requested, date and time, browser user agent and referring page) to deliver the website to you, and it analyses traffic to block attacks and abuse. Cloudflare acts as our processor under its Data Processing Addendum, which forms part of its terms of service. We do not run our own servers and do not keep our own access logs.
All of the website's files, including fonts and the WebP encoder, are served from our own domain through Cloudflare; no files are loaded from third-party CDNs or font services. When its bot protection is active, Cloudflare may set a strictly necessary security cookie; see our Cookie Policy. Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/
Advertising: Adsterra
We show ads provided by the advertising network Adsterra (adsterra.com): banner ads, and ads shown while you wait for a download.
What Adsterra may process: your IP address, device and browser information, cookie identifiers, the pages you visit, and your interactions with ads (such as views and clicks).
Why: to deliver ads, limit how often you see the same ad, measure ad performance and prevent fraud.
When: Adsterra's scripts are only loaded after you accept "Advertising" in our cookie banner. If you refuse, they are not loaded.
Who is responsible: we decide to include Adsterra's ads on our website and are responsible for that and for asking for your consent. Adsterra decides how it uses the advertising data it receives, as an independent controller under its own privacy policy: https://adsterra.com/privacy-policy-managed/, and cookie policy: https://adsterra.com/cookies/.
Your choices: besides our cookie settings, you can opt out of personalised ads from many ad companies at https://www.youronlinechoices.eu/.
What Convertisio stores in your browser
Convertisio itself sets no cookies. It may store small items in your browser's local or session storage, such as cv-theme (your light or dark theme, if you change it) and cv-consent (your cookie choices). These never leave your device. Our Cookie Policy lists them in detail.
If you write to us about your data
If you email the data protection address, we process your email address, your name if you give it and your message, only to handle your request. The legal basis is our legal obligation to answer data protection requests (Art. 6(1)(c)). Messages to this address are forwarded by Cloudflare Email Routing to our mailbox and stored by our email provider, which process them on our behalf. We keep this correspondence for 12 months after your request has been handled, unless we need it longer to establish or defend a legal claim.
Who receives personal data
- Cloudflare, Inc.: hosting, content delivery, security and email forwarding (processor).
- Adsterra: advertising, as an independent controller for its own advertising purposes.
- Our email provider: only if you send a data protection request (processor).
- Public authorities: only where we are legally required to disclose data.
We do not otherwise share personal data with anyone, and we never sell it.
International data transfers
Cloudflare may process data outside the European Economic Area (EEA), in particular in the United States. Such transfers are covered by the European Commission's adequacy decision for the EU–US Data Privacy Framework, under which Cloudflare is certified, and by the Standard Contractual Clauses included in their data protection terms. You can check a company's certification at https://www.dataprivacyframework.gov/. Adsterra, as an independent controller, is responsible for the safeguards that apply to the data it processes, as described in its privacy policy.
How long data is kept
- Your images: never received by us, so never stored by us. In your browser, they stay in memory only until you download or remove them, start a new batch, or close or reload the tab.
- Items in your browser storage: see the durations in our Cookie Policy.
- Hosting and security data: kept by Cloudflare for the periods set out in its privacy policy.
- Adsterra advertising data: kept by Adsterra according to its own privacy and cookie policies.
- Emails: 12 months after your request has been handled.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- rectification of inaccurate data;
- erasure of your data;
- restriction of processing;
- data portability, for data you gave us on the basis of consent or a contract;
- object to processing based on our legitimate interests;
- withdraw your consent at any time, without affecting processing that took place before.
You can change your cookie choices here:
You also have the right to lodge a complaint with a data protection supervisory authority. Our lead supervisory authority is the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, Belgium, https://www.dataprotectionauthority.be/. You may also complain to the authority of the EU country where you live or work; all EU authorities are listed at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
To exercise your rights, email [email protected] with the subject "Privacy request". We will reply within one month; in complex cases this can be extended by up to two more months, and we will tell you if so. We may ask for information to confirm your identity. Because Convertisio has no accounts and never receives your images, we often hold no data that we can link to you. For advertising data that our advertising partners process as independent controllers, you can also contact them directly.
Do you have to give us any data?
No. You can use Convertisio without giving us any personal data. Your device has to exchange basic technical data, such as your IP address, with our hosting provider to load any website. Services that need consent are optional.
Automated decisions
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our advertising partners select which ads to show automatically, but this does not have such effects.
Children
Convertisio is a general-audience tool and is not directed at children under 13, the age of digital consent in Belgium. We do not knowingly collect personal data from children. If you are under 13, please ask a parent or guardian before accepting optional cookies. If you think a child has given us personal data, write to the data protection address above and we will delete it.
Changes to this policy
We may update this policy, for example when we add or remove a provider. The "Last updated" date at the top shows the current version. If a change affects what you have consented to, we will ask for your consent again.
Data protection requests
For a question about this policy or your data, email [email protected] or write to Aissa Scarmure, Rue de la Station 58, 1360 Perwez, Belgium. See also our Cookie Policy and Terms of Service.