OnlineConverTools
Sign in

Privacy Policy

Last updated: October 17, 2026

1. Introduction

OnlineConverTools ("we", "us", or "our") operates the website www.onlineconvertools.com. This policy explains what information we collect, what each tool does with your files, which services we rely on, and your rights. The short version: most tools never send your file anywhere — it is processed by your own browser, on your device. The tools that need a server are listed by name below. OnlineConverTools is run by its founder, Moufid Haddad, in Québec, Canada, who is responsible for this site and for the protection of your personal information (see "Contact us" below).

2. Your files: what stays on your device and what is sent

Processed entirely in your browser (nothing is uploaded): every tool not named in this section — for example Merge, Split, Rotate, Protect, Sign, and Edit for PDF files; the image converters (except EPS and PostScript files, below), compressor, resizer, and filters; the GIF maker and compressor; audio trimming, joining, and conversion to formats other than Opus and AMR (except, in Audio Converter, one file too large for the browser: see below); ZIP/RAR/7z extraction; all text, math, QR/barcode, and developer tools. You can check it yourself: open your browser's developer tools, "Network" tab, and use the tool — no request carries your file. Some of these tools download program code, language data, or fonts from a public server (jsDelivr) the first time you use them; nothing about you or your file is sent with those downloads.

Sent to our own servers (hosted by us on Railway, not shared with any other company), processed, then deleted:

  • Documents: Excel to PDF, PowerPoint to PDF, HTML to PDF, Markdown to PDF, Text to PDF when the text has emoji or a script beyond Latin, Greek, Cyrillic, Arabic, Hebrew, Devanagari, Tamil, Thai, and Chinese / Japanese / Korean, EPUB to PDF, MOBI to PDF, Word to PDF for .doc files (and the OpenDocument, RTF, and other formats it takes), Merge PDF for the Word, Excel, and PowerPoint files you add to it, Repair PDF, PDF to PDF/A, Compress PDF, and PDF to Word when you choose Word 97-2003 (.doc): the .docx made by ConvertAPI is converted to .doc here.
  • PDF pages an iPhone or iPad cannot draw: in PDF to JPG, PDF to Image ("Pages to images"), and Redact PDF, a page the device has not drawn within 20 seconds is drawn by our PDF service instead — the PDF is sent, the page image comes back, the PDF is deleted. The page says so before and after; on a computer these tools never send the file.
  • OCR PDF on an iPhone or iPad: there, every page is recognized by our own OCR service (Tesseract, same languages), because the recognition did not finish on a real iPhone in our tests — the PDF is sent, the text and an invisible text layer come back, the PDF is deleted. The page says so before you start and after; on a computer or an Android device, OCR PDF never sends the file.
  • Video: Compress Video, Video Converter, Filter Video, Resize Video; Rotate Video in its default "Compatible everywhere" mode (the "Instant, lossless" mode stays in your browser); Merge Videos when the clips differ in size or format; Trim Video in "Precise cut" mode for longer or larger clips; Screen Recorder only if you ask for an MP4 copy; Video, MP4, MOV, AVI, and WebM to GIF.
  • Audio: Audio Converter, Boost Audio, Split Audio, Compress Audio, and Merge Audio when the output format is Opus; Audio Converter and Video to Audio when it is AMR (the voice format of phones, which browsers cannot write); Audio Converter for one file too large for the browser (over 750 MB on a computer, 300 MB on a phone or tablet, up to 1000 MB), whatever the output format, only after you click the button that sends it.
  • Images: Background Remover; AI Image Upscaler, except when the model runs on your device (a browser with WebGPU, an image without transparency, a result small enough for the browser) — the page always says which happened. EPS and PostScript files in Image Converter and Image to PDF: browsers cannot read them, so our PDF service turns them into a PDF with Ghostscript. PDF to Image when you choose SVG, EPS, or PS: the pages are made by our PDF service on every device. Each page says so before and after.
  • Large files on their way to a tool below: files over 4 MB for the ConvertAPI and transcription tools transit through our own storage server, where they are deleted after processing.

Sent to a specialized provider, through our server (see Section 5 for each provider's policy):

  • ConvertAPI (Lithuania): Word to PDF for .docx files (also when added to Merge PDF), PDF to Word, PDF to Excel, PDF to PowerPoint. Files are sent with storage disabled and are not kept by ConvertAPI.
  • OpenAI (USA): the text you enter in AI Chatbot, AI Writer, AI Paraphraser, AI Translator, Grammar Checker, Text Summarizer, Keyword Extractor, Sentiment Analyzer, Data Extractor, and Email Generator; the text of your PDF in AI PDF Summarizer and Translate PDF; your image in Image Captioner; your description in AI Image Generator; your audio in Audio Transcriber and Audio to Text.
  • Pangram Labs (USA): the text you paste into AI Detector.
  • Google Cloud Translation (USA): your PDF in Translate PDF, when you choose "Whole PDF (layout kept)" (offered only when that mode is shown on the page). Google returns the translated PDF and does not keep the file.

Sent by your browser, not by us: in Audio to Text's microphone mode, speech recognition is done by your browser, which sends the recording to its maker's speech service (Google in Chrome, Microsoft in Edge, Apple in Safari) under that company's privacy policy. We never receive the recording, only the text your browser returns to the page.

We never sell your files or text, never use them to train any model, and never look at them. On our servers, the file you send is deleted as soon as processing ends, and the result right after you download it (or automatically after 15 minutes if you never do); nothing about a file — name, content, or metadata — is written to our logs. Three tools contact other services at your request only: Currency Converter downloads exchange rates (open.er-api.com) and the rate history of the two currencies you choose (api.frankfurter.dev) without sending anything about you; API Tester sends the request you write to the address you type; and HTML to PDF, when you give it a web address, has our server fetch that public page (and its images, styles, and fonts) to convert it — addresses of private networks are refused.

3. Other information we collect

  • Visit statistics: outside the European Economic Area, the United Kingdom, and Switzerland, we use Google Analytics to count visits and see which pages are used (pages viewed, approximate location from your IP address, browser, and device type, time of visit). Google Analytics sets cookies (Section 4). In the European Economic Area, the United Kingdom, and Switzerland (including their territories, such as the French overseas territories, the Channel Islands, the Isle of Man, and Gibraltar), Google Analytics is not loaded at all: no Analytics cookie is set, nothing is sent to Google Analytics, and Analytics cookies set by an earlier visit are deleted. The same applies when your country cannot be determined. Your country is the one our hosting provider (Vercel) derives from your IP address for each request; we use it only for this choice and do not store it.
  • Server logs: our hosting provider (Vercel) keeps technical logs of requests, including IP addresses, for security and operation.
  • Usage metrics and abuse limits: to stay within our providers' budgets and prevent abuse, we record which paid or server tool was used, when, and an estimated processing cost. For per-visitor limits we record a one-way cryptographic hash of your IP address, never the address itself. We never record file contents or the text you submit.
  • Failure reports: when a tool fails or shows an error message, we record an anonymous report so we can fix it: the tool's name, the file extension, a coarse size range (e.g., "1-10MB"), the error type, a cleaned error message (file names, paths, quoted text, web addresses, email addresses, and long numbers are removed from it), a coarse browser name and version (e.g., "Chrome 129"), and the time. Never your file, its content, its real name, the text you typed, or your IP address. Nothing is sent when a tool succeeds.
  • Contact form: your name, email address, and message, stored in our database and emailed to us (through our email provider, Resend). If you attach images (PNG, JPG, GIF, or WebP, up to 3 files and 4 MB), they are only included in that email — never stored in our database or any file storage.
  • Account (optional): if you create an account, your name and email address, managed by our authentication provider (Supabase). No tool requires an account.

4. Cookies and local storage

  • Google Analytics (_ga, _ga_<id>): visit statistics, up to 2 years — only outside the European Economic Area, the United Kingdom, and Switzerland (Section 3).
  • Google Translate (googtrans): set only if you choose a language in the menu, to keep the page translated. Google's translation script is loaded when you open the language menu. While a translation is on, the text shown on the page — including results a tool displays — is sent to Google to be translated; files themselves are never sent.
  • Advertising: the site shows no ads at present and sets no advertising cookie. If we start showing ads (Google AdSense), this policy will describe them, with their cookies and how to refuse them, before they appear.
  • Local storage in your browser (never sent to us): your light/dark mode choice, the list of tools you used recently (their page addresses only — never a file name or content; the "Clear" button next to the list deletes it), the tools you add to your favorites (their page addresses only; the star or the × button removes one), notes, and settings you save in some tools, and — if you sign in — your session.

You can delete cookies and local storage at any time in your browser's settings.

5. Services we use

Some of these providers are located outside your country, including in the United States; they process data only to provide their service to us.

6. How we use your information

  • To run the tools you use and return their results
  • To answer your messages and provide support
  • To understand which pages are used and improve the site
  • To keep costs under control and prevent abuse
  • To detect and fix technical problems

7. Your rights (GDPR, UK GDPR, Quebec Law 25, CCPA)

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you, and receive a copy;
  • Correct inaccurate data;
  • Delete your data, including your account;
  • Object to or restrict some processing, and withdraw consent at any time;
  • Opt out of the "sale" or "sharing" of personal data (California). We do not sell personal data.

To exercise any of these rights, write to contact@onlineconvertools.com; the site owner is the person responsible for the protection of personal information. You may also complain to your data protection authority.

8. Data retention

Files processed on our servers: deleted after processing, and a result you never download after 15 minutes (Section 2). Usage metrics and failure reports: 90 days. Hashed-IP rate-limit records: 2 days. Contact messages: as long as needed to answer and follow up. Account data: until you delete your account or ask us to. Google Analytics data: kept by Google for the retention period set in our account (at most 14 months).

9. Children's privacy

Our service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

10. Changes to this policy

We update this policy whenever a tool starts or stops sending data somewhere, and change the "Last updated" date above.

11. Contact us

Questions about this policy:

Email: contact@onlineconvertools.com
Website: www.onlineconvertools.com/contact