Privacy Policy

1. Scope

This Privacy Policy explains how this website handles information when you use its image conversion, image compression, image resizing, PDF utility, account, contact, and administrative features. The service is designed around temporary file processing and data minimization.

2. Files you upload

Uploaded files are stored in non-public, randomly generated server directories so the conversion engine can process them. Completed outputs are delivered through cryptographically random download tokens instead of direct storage paths. Uploads and outputs are intended to expire after 30 minutes. The server owner must run the included cleanup cron job for automatic deletion to occur on schedule.

Do not upload files you are not authorized to process. Avoid uploading highly sensitive, regulated, classified, or irreplaceable material. No internet service can guarantee absolute security.

3. Session cookies and recent history

The website uses an essential, HTTP-only session cookie for security protections, CSRF validation, upload ownership, sign-in state, and recent conversion history. Recent conversion records are associated with a one-way keyed hash of the browser session. The cookie is not used to create advertising profiles.

4. Google sign-in

When Google OAuth is configured and you choose to sign in, Google may provide a verified email address, display name, profile image URL, and provider account identifier. The website does not receive your Google password. Account information is used to authenticate you, identify administrator access when the email matches the configured administrator email, and connect temporary conversion history to your signed-in account.

5. Traffic and referral analytics

The platform records page paths, visit times, browser user-agent strings, referral URLs, referral hosts, search-engine classification, and a keyed hash of the visitor IP address. The raw IP address is not stored in the visits table. This information supports aggregate traffic reporting, organic-search analysis, abuse prevention, and technical diagnostics.

Referral URLs can contain information added by the referring website. Site administrators should restrict dashboard access and review retention practices appropriate to their jurisdiction.

6. Contact messages

When you use the contact form, the website stores your name, email address, subject, message, submission time, status, and a keyed hash of the submitting IP address. This data is used to respond to support, privacy, copyright, and general inquiries.

7. Security measures

The application uses prepared database statements, server-side file signature checks, CSRF tokens, secure session-cookie settings, random upload and download tokens, blocked storage directories, output escaping, login rate limiting, and restrictive browser security headers. Administrators remain responsible for server patching, HTTPS, backups, file permissions, database security, and correct cron configuration.

8. Data retention

Conversion files are intended to be removed after 30 minutes. Conversion database records may remain as unavailable audit entries until an administrator purges them. Visit records, user accounts, OAuth links, login-attempt records, and contact messages remain until deleted according to the site owner’s operational retention policy. Login-attempt records older than two days are removed by the cleanup script.

9. Third parties

Google processes information when you use Google sign-in under Google’s own terms and privacy practices. Hosting providers, content delivery networks used for frontend assets, and infrastructure operators may process technical request data as necessary to deliver the website. This baseline platform does not sell personal information.

10. Children

The service is not directed to children who are below the minimum age required to consent to online data processing in their jurisdiction. A parent or guardian should contact the administrator if they believe a child submitted personal information.

11. Your choices

You may use many conversion tools without creating an account, clear your available conversion history, allow files to expire, or contact the administrator to ask about account or message data. Applicable privacy laws may provide additional rights.

12. Policy changes

This policy may be updated when service features, legal requirements, or data practices change. The effective date at the top indicates the current published version.

13. Contact

Privacy questions may be sent through the Contact Us page or by email to mrpuppyy07@gmail.com.