Privacy Policy

Overview

This policy explains what happens when you convert an image, create an account, buy more conversions, or contact us for help. The short version: many simple tools can run in your browser, files sent to our servers are temporary and private, and we do not sell your files or personal data.

Files and conversions

For common single-file work such as JPG, PNG, WebP, resize, crop, and flip, processing may happen entirely on your device. More complex work, such as HEIC conversion, SVG rendering, large files, batches, ZIP downloads, saved results, paid conversions, or selected AI tools, may require server processing. We use your files only to deliver the conversion you requested, keep them private, and make downloads available for a limited time.

Chrome extension

• The Photo Converter Chrome extension handles only the image you explicitly choose through its file picker or drop area, or select from its right-click image context menu. Local tools keep the selected image and result in browser memory on your device and do not upload them. The original local filename is not persisted, displayed, logged, or sent in analytics. The extension itself does not include GA4, advertising, or a third-party analytics SDK.
• For a server tool, the extension identifies the upload and conversion cost before the action. The selected image is sent to Photo Converter private storage only after you choose to continue, and the server retention periods described above apply.
• During source-permission or acquisition recovery, a re-fetchable source URL may remain in private chrome.storage.session for no more than five minutes; it is deleted after success, replacement, abandonment, timeout, or a terminal failure, and its query string is never displayed or logged. A random installation ID remains in local extension storage until uninstall, is sent only to Photo Converter for anonymous abuse prevention, and is stored by the server only as a salted hash.
• The extension has no account sign-in and does not receive an account email, Google credential, purchase history, or conversion balance. An opaque anonymous server-job session may be kept in chrome.storage.session only to attach a requested conversion to the same browser session. It expires on the server and is cleared after a 401 response, browser restart, extension reload, update, disable, or uninstall. Photo Converter uses information received through Chrome APIs only to provide or improve the extension’s image-conversion purpose. This use complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Information we collect

• Account details: email address, display name, profile image, language preference, sign-in provider, account status, and conversion balance information.
• Usage and security signals: anonymous session cookies, language choices, approximate device and browser information, hashed abuse-prevention signals, error codes, and rate-limit events.
• Conversion details: selected tool, input and output formats, approximate file size, job status, errors, output metadata, timestamps, and whether a temporary download was issued. We do not put file contents, full payment details, passwords, or private download links in analytics logs.
• Billing records: product purchased, price, currency, payment status, payment-provider references, conversion grants, balance changes, refunds, and receipts.

How we use information

We use information to run conversions, deliver downloads, show your balance, process purchases, answer support requests, prevent abuse, improve reliability, and meet legal obligations. Product analytics is used to understand errors and usage patterns; it is not a reason to inspect your file contents.

Storage, downloads, and retention

Files processed on our servers are kept in private storage and are available through temporary download links. Anonymous uploads are normally kept only for a short window, often 1 to 6 hours. Logged-in free results are normally kept about 24 hours. Paid results may remain available for up to 7 days. Support, security, billing, and dispute records may be kept longer when needed for accounting, fraud prevention, or legal reasons.

Cookies and device signals

We use cookies and similar storage to remember language choices, keep anonymous conversion sessions, protect sign-in and payment flows, and apply fair-use limits. Partners such as Google, Stripe, analytics, advertising, or infrastructure providers may set their own cookies when their services are used.

Analytics and consent

We use Google Analytics 4 to measure page views, coarse browser and device categories, conversion steps, purchases, ratings, and site performance. Google Consent Mode v2 starts with analytics storage denied. Before you choose, Google may receive cookieless Consent Mode signals; accepting enables analytics cookies and full measurement, while rejecting keeps analytics storage disabled. We do not add file contents, original filenames, private download links, email addresses, account IDs, raw device fingerprints, or tokens to GA4 events. You can change your choice from Cookie preferences in the footer.

Advertising and your choices

When advertising is active on the site, we use Google AdSense, which may set cookies or use similar technology to serve and measure ads. Ads show for every visitor regardless of purchase history. Where a cookie banner appears, choosing "Accept" allows personalized ads; choosing "Reject" limits ads to non-personalized ads only (Google Consent Mode). You can change your choice at any time from "Cookie preferences" in the footer, or opt out of Google's personalized advertising directly at adssettings.google.com. Sensitive pages (sign-in, checkout, payment result) never show ads.

Processors and sharing

We do not sell user files or personal data. We share information only with service providers that help us run the product, such as sign-in, payment, hosting, storage, analytics, advertising, support, and selected AI providers. We may also share information when you ask us to, when required by law, or when needed to protect users, prevent abuse, or defend the service.

Security and international processing

We use HTTPS, private storage, limited-time download links, access controls, and operational monitoring to protect the service. Because our providers may operate globally, your information may be processed in countries where those providers maintain infrastructure or support teams.

Your choices and rights

You may ask us to access, correct, export, or delete account data. Uploaded files normally expire automatically, so after the retention window there may be no file left to remove. Some payment, security, support, tax, and dispute records may be retained when law or legitimate business needs require it. Photo Converter is not intended for children under 13 or the minimum digital-consent age in your jurisdiction.

Changes and contact

We may update this policy as the product, providers, laws, or security practices change. The latest version is posted on this page. Questions about this policy? Contact us at ailun@matchtrio.com.