Privacy

Most conversions never send your file anywhere. Images, audio, video, data files, subtitles, fonts and 3D models are converted inside your browser, by code your browser downloaded. For those, the file is never sent to us, never stored by us and never seen by us. You do not have to take our word for it: open your browser's developer tools, watch the network tab, and convert something. You will see the page itself, the analytics and advertising requests described below — and no request carrying your file.

Document and archive conversions are the exception and they do upload the file. Which is which is written on the button before you press it, and described in full further down.

Who is responsible

Quinvert operates this service and is the controller for any personal data described below. You can reach us at info@quinvert.com or through the contact page.

What we collect

There is no account system, so there is nothing you have told us. What we collect is measurement and, where you allow it, advertising data — the advertising is described in its own section below. For measurement, we use Google Analytics, if you agree to it, to count page views and see which conversions people look for. It records the page you are on, roughly where in the world you are, and what browser and device you use. It never sees your files — it runs on the page, not on the conversion. The legal basis is your consent, given through the banner and withdrawable at any time; see the cookie section below for exactly what is and is not stored before you answer.

Google acts as our processor for this and also uses the data for its own purposes, which is why it is named here rather than described vaguely as "our analytics". You can opt out for every site at once with Google'sbrowser add-on, or by using your browser's tracking protection, which blocks it. Blocking it does not affect any conversion on this site.

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical data in order to deliver the page to you — your IP address, the time of the request, which page you asked for and what browser you use. This is necessary for the site to work at all and to protect it from attack, and it is the basis on which we rely: our legitimate interest in operating and securing the service. We build no profiles from it.

Cookies, and the choice you were given

Nothing is stored on your device until you say yes. Every category of consent — analytics, advertising storage, advertising personalisation and ad user data — is set to denied before any Google tag is fetched, rather than after it has loaded. So on a first visit, with the banner still on screen, no analytics cookie and no advertising cookie exists. You can check: open your developer tools, look at the cookies for this site, and there will be no _ga.

Accepting sets two cookies, _ga and _ga_GNJ92YFFZJ, which let Google tell a returning visit from a new one. They last up to two years. Rejecting sets none, and we delete any that an earlier acceptance left behind.

You can change your mind at any time with the Your privacy choices link, which is in the footer of every page. Withdrawing takes exactly one click, the same as giving it did.

Which banner you saw depends on where you are. In the European Economic Area, the United Kingdom and Switzerland the question is asked by Google's certified consent platform, because advertising there may only be served through one. Everywhere else it is asked by our own, which is the one described above. Only ever one of them appears, and the link in the footer reaches whichever it was — two banners would mean two answers that could disagree, with no way to say which counted.

Where Google's platform asks, your answer to "store or access information on this device" is also taken as your answer for analytics. That is the standard mechanism and it is why one dialog settles both; if you would rather it did not, refusing it stops analytics as surely as refusing ours does.

While consent is denied, Google's tag still sends a request that says a page was viewed, without cookies and without advertising identifiers — this is what Google calls consent mode, and it is how the visit is counted without being tied to you. That request carries your IP address, as any request to any server does. If you would rather it were not sent at all, browser tracking protection blocks it, and blocking it does not affect a single conversion on this site.

Consenting to advertising sets further cookies, belonging to Google and its advertising partners, which is what an advertising identifier is stored in. Refusing sets none of those either. Nothing else on this site stores anything: there is no account and no preference to remember, and the record of your consent choice is kept in your browser's local storage rather than in a cookie, so it never travels to any server.

An earlier version of this page said there were no cookies at all and that a banner would therefore be theatre. That was true when it was written and it is not true now, which is why it is corrected here rather than quietly removed.

Advertising

Advertising is how this site is paid for. Converting a file costs you nothing, there is no account and no premium tier, and the money has to come from somewhere; it comes from ads shown beside the converter. Ads are supplied by Google AdSense and the advertising partners Google works with.

Where an ad appears, what happens next depends entirely on your answer to the consent dialog:

• If you consent, those partners may store an advertising identifier on your device and combine it with what you have done on this and other sites to build a profile, so that the ads you see relate to your likely interests. They also measure whether an ad was seen and whether it was clicked.
• If you refuse, ads are still shown — they have to be, or the site does not pay for itself — but they are chosen without any of that. No advertising identifier is stored, no profile is built or used, and the ad is selected from the page it sits on rather than from you. This is what the industry calls a non-personalised ad.

We never give an advertiser your files, and we could not: the ads run on the page, and most conversions never leave your browser at all. We are not paid per conversion and no advertiser is told what you converted.

We do not use the feature that lets vendors scan your device's characteristics to identify you — fingerprinting, in plainer words. It is offered to us and it is switched off, because a site whose argument is that your files stay on your device should not be probing that device to recognise you.

Conversions that need a server

Some formats cannot be converted inside a browser — documents, spreadsheets, presentations, archives and fonts among them — and those run on our own server. The file is uploaded over an encrypted connection, converted, and the working directory is deleted as soon as the result has been read, whether the conversion succeeded or failed. We do not keep a copy, we do not read it, and the machine doing the work has no route to the internet at all, so it could not send your file anywhere even if it were asked to.

Every conversion says which of the two it is, on the button, before you press it.

Sharing

We do not sell your data. Two companies process it on our behalf: Cloudflare, which hosts the site and runs the conversion server, and Google, which provides both the analytics and the advertising described above. Google is in the United States, so that data leaves the EU; Google relies on the European Commission's standard contractual clauses for the transfer. Google's advertising partners receive advertising data only, and only where you have consented — the full list is shown inside the consent dialog, where you can accept or refuse them individually. Your files go to none of them, for any purpose other than the conversion you asked for.

What is actually collected, in a table

Several of the laws below require this to be listed by category rather than described in prose, so here it is once, and the regional sections refer back to it.

We collect no name, no email address unless you write to us, no account, no payment details and nothing that any of these laws calls sensitive or special-category data.

We build no profile of you ourselves, and no decision affecting you is made automatically. What the advertising described below can do is a separate question, answered there rather than glossed over here.

Your rights in Europe and the United Kingdom

Under the GDPR and the UK GDPR you have the right to access the personal data held about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. Where we rely on your consent — which is the case for analytics — you can withdraw it at any time, and withdrawing is neither harder nor slower than giving it was. You also have the right to complain to a supervisory authority in the country where you live.

California

We do not sell your personal information, and we never have. If we later run advertising, showing personalised ads counts as "sharing" for cross-context behavioural advertising under the CPRA even though no money changes hands for your data — so the control is already here rather than added afterwards: Your privacy choices.

We honour the Global Privacy Control signal. If your browser sends it, that is treated as an opt-out on arrival and you are not asked again — you will not see the consent banner at all, and analytics stays off unless you deliberately turn it on with the link above.

You have the right to know what we collect (the table above is that, published rather than requested), to delete it, to correct it, and to opt out of sharing. We will not treat you differently for exercising any of them — there is no premium tier that turns tracking off, because the tracking is off for everyone who says so. To make a request, write toinfo@quinvert.com.

Brazil

Under the LGPD the legal basis for analytics is your consent (Art. 7, I) and for delivering and securing the site it is our legitimate interest (Art. 7, IX). You have the rights set out in Art. 18: confirmation that processing exists, access, correction, anonymisation or deletion of unnecessary data, portability, information about who we share with, and withdrawal of consent. Requests go to info@quinvert.com, which is also the contact for data protection matters generally. Analytics data is processed in the United States by Google under the transfer terms described above.

South Africa

Under POPIA we process personal information lawfully and only for the purposes named above, and we hold no more than those purposes need. You may ask what we hold about you, ask for it to be corrected or deleted, and object to processing; the same address handles those requests. You may also complain to the Information Regulator. Analytics data is transferred outside South Africa to Google in the United States, which is permitted under section 72 because you consented to it and can withdraw that consent at any time.

In practice we hold no name, no email address and no files, because we ask for none and keep none. The analytics data is the one thing that exists, and it is not tied to anything that identifies you by name. If you want it gone, the fastest route is Google's opt-out linked above, which stops it being collected in the first place. You can also write toinfo@quinvert.com and we will look into it.

Children

Quinvert is not directed at children and we knowingly collect no data from anyone, of any age.

Changes

When what we do changes, this page changes with it, and the date at the top moves. We do not make changes quietly.