Private by default
  1. Home
  2. Privacy Policy

Privacy Policy

Last updated: 20 September 2026 Files never uploaded

The short version

The images you convert on this site are never uploaded. All decoding and encoding happens inside your own browser using WebAssembly and the browser's canvas API. No copy of your file is transmitted to this site or to anyone else, and there is nothing for us to store, retain, or delete.

You can verify this. Open your browser's developer tools, switch to the Network tab, and convert a file — no request carrying image data is made. You can also load this page, disconnect from the internet, and convert files successfully.

What we do not collect

Accounts

There is an optional account, on a separate site at swapformat.com/account. It saves your settings and a record of what you converted. It is not required for anything on this page: every converter here works without one, with no limit and no sign-in, and that will not change.

Creating one means giving us an email address. Nothing else about you is asked for, and your files still never leave your browser — the account records that a conversion happened, never what was in it, and never a filename.

What an account holds, exactly, and for how long, is set out at swapformat.com/account/privacy. That page is generated from the database itself rather than written by hand, so it cannot describe something we do not store, or omit something we do. You can export everything held about you, or delete the account, from its settings.

The conversion counter

The site displays a running total of how many images it has converted. Keeping that total is the one thing a conversion reports, and it is worth being exact about what that means.

When a conversion finishes, your browser sends a single request to count.swapformat.com, a server we run. The request is a POST with no body, no query string and no credentials — it adds one to a number and nothing else. There is no field in it for a file name, a format, a file size, an image, or anything identifying you, because we did not build one. The server reads nothing from the request except which site it came from, and stores nothing but a single integer.

This is the same request whether you convert a holiday photo or a passport scan, and it is identical for every visitor. It records that a conversion happened. It has no way to record what was in it.

You can check this yourself: open the Network tab, convert a file, and look at the request to count.swapformat.com. It has an empty payload. If you block it, or you are offline, the conversion works exactly as before and the number simply does not appear.

Server logs

This site is served as static files by our hosting provider, Cloudflare. Like any web host, Cloudflare records standard request information — IP address, user agent, requested URL, timestamp — for security, abuse prevention, and aggregate traffic measurement. We do not use these logs to identify individuals. Cloudflare's handling of that data is governed by its own privacy policy.

Advertising

This site is funded by advertising, supplied by Monetag. Its script runs on every page except for signed-in subscribers, who see no advertising at all. It is a third-party script: it runs in the same page as everything else and is governed by its provider's policies rather than ours.

It identifies your device, and this is what it stores. Rather than describe that in general terms, here is the actual list, which we checked by loading a page and reading what appeared:

The purpose of those identifiers is to recognise the same device across different websites, so that advertising can be selected on the basis of where else it has been. That is what "identity sync" means, and it is the part most worth understanding: it is not about this site, it is about linking your visit here to your visits elsewhere. We do not receive that data, cannot read those cookies, and cannot delete them for you.

None of this touches your files. The advertising script cannot send your images anywhere, and this is enforced rather than promised: the Content-Security-Policy served with every page lists the only origins any script on it may contact, so there is no route by which a third party could upload your image even if it tried. That is the same control described at the top of this policy, and it is worth more than a reassurance.

You can remove the identifiers by clearing site data for this site and for the domains above, or prevent them entirely with a content blocker or by blocking third-party cookies. Industry opt-out pages exist at aboutads.info and youronlinechoices.eu, though they depend on the vendor honouring them and we cannot verify on your behalf that this one does.

There are also individual links on some pages, labelled as sponsored where they appear, which pay this site if you visit them. Those are ordinary links: following one is your choice, and not following one stores nothing.

There is no consent banner on this site, and the advertising described above runs without asking you first. We would rather write that down than have you discover it. If you are in the European Economic Area, the United Kingdom or Switzerland, the law generally requires your consent before the identifiers listed above are stored, and at the moment this site does not ask for it.

An earlier version of this page promised that a certified consent platform would be added before any advertisement was displayed here. Advertising was turned on without one, so that sentence has been removed rather than left standing: a commitment we are not currently meeting is worse than a gap described plainly. This is a known shortcoming, not a considered position, and the honest summary is that the protection you are entitled to is not in place yet.

In the meantime the remedies in the section above work regardless of whether a banner exists: clearing site data removes the identifiers, and a content blocker or a third-party-cookie block prevents them. A subscription also removes advertising entirely, along with the space reserved for it.

Analytics

This site uses Cloudflare Web Analytics to count visits and see which pages are used. It sets no cookies, stores nothing on your device, and does not follow you across other websites. There is no persistent identifier, so repeat visits cannot be linked back to you. What it records is limited to the page you viewed, the referring site if you arrived from a link, your browser and operating system, your country, and page loading speed.

We record a small number of events on a server we run, at events.swapformat.com , to understand how the converters are used — for example, how often a conversion succeeds, and which formats people arrive with. It sets no cookies, creates no persistent identifier, and does not track you across other websites.

These events are held in your browser while you are on the page and sent in a single request when you leave it. That is deliberate: it means a conversion itself makes no network request beyond the counter above, so you can convert a file with the Network tab open and watch nothing leave while it happens.

A small number of events are recorded when you use a converter: that a file was selected, that a conversion started, whether it succeeded or failed, that a download began, whether you used the size limit or a destination preset, and whether you clicked the Pro button. Each event carries only coarse-grained labels drawn from a fixed list — the format you started from, the format you chose, a size range such as "1-5MB", a batch size range, which converter page you were on, and an error category if something failed.

What is never recorded: your file's contents, any part of its pixels, its EXIF or GPS metadata, its dimensions, its exact size in bytes, and its filename. Those values are not transmitted in any form. The code that enforces this is public, and it works by only permitting values from a fixed vocabulary rather than by filtering out bad ones.

If your browser sends a Do Not Track or Global Privacy Control signal, no events are recorded at all.

Some pages link to products on Amazon. These are affiliate links: if you follow one and buy something, this site earns a small commission, and you pay exactly the same price as you otherwise would. They are marked as affiliate links wherever they appear, and none of the advice on this site depends on you buying anything — the converters are free and the fixes described in the guides are free.

Links point at Amazon.com by default and at Amazon.in for visitors whose device is set to Indian time, so you reach a store you can actually buy from. That check reads your browser's own timezone setting and nothing else — there is no location lookup, and no third-party script is involved.

Following one of those links takes you to Amazon, which sets its own cookies and applies its own privacy policy. That happens on Amazon's site, not this one. We are not told who clicked, and we receive no information that identifies you — only aggregate commission totals. If you do not follow the links, nothing about them affects you at all.

Children

This site is not directed at children under 13 and we do not knowingly collect personal information from them. Nothing on swapformat.com asks for personal details, so there is nothing for a child to submit here. The optional account is not intended for children under 13.

Your rights

Depending on where you live, you may have rights to access, correct, or delete personal data held about you, and to object to its processing. If you have never created an account, we hold no personal data about you beyond transient server logs, and such a request will be answered by confirming that there is nothing on file. If you have an account, you do not need to ask us: you can export everything it holds, or delete it outright, from its settings — deletion erases the record rather than hiding it. Requests regarding advertising cookies should be directed to the vendors named above, using the opt-out links in the Advertising section — we cannot access or delete data held by Google on your behalf.

Changes to this policy

If this policy changes materially, the date at the top of this page will be updated. The commitment that image files are processed locally and never uploaded is fundamental to how the site is built, not a policy choice, and will not change without the site working in a completely different way.

Contact

Questions about this policy can be sent to hkggroups@gmail.com. See the contact page for more.