Revised 9 September 2026
Privacy
convrtr does not collect, store, or transmit your files. Every conversion happens locally, in your browser.
Nothing you drop onto this site is ever uploaded — to us, or to anyone else.
Not a promise made only in prose. There is no server for a conversion to reach.
This site is a static export (next.config.ts: output: "export"), so nothing is there to reach even if something tried.
Checked automatically, every time this project ships. e2e/network-guard.ts watches every request.
It watches while the running page converts a real file, and fails the build if a single request is cross-origin, carries a body, or leaves by any method other than a plain GET or HEAD. The check proves itself, too: a companion test in the same suite deliberately fires a real cross-origin beacon request first and asserts the guard actually flags it as suspicious — so a silently broken guard would fail loudly, not pass by accident.
No accounts. Nowhere to sign up, nothing to sign in to.
No accounts. There is nowhere to sign up, and nothing to sign in to.
No analytics, no telemetry, no cookies. package.json lists every dependency in full.
None of those dependencies is an analytics or tracking library, and no code anywhere in this repository sets a cookie.
A small amount of state stays on your device. Neither ever leaves the device.
That state is one flag in localStorage remembering that you've already seen a one-time notice about very large downloads, plus scratch copies of the file you're actively converting, held in your browser's Origin Private File System until the conversion finishes — neither leaves the device.
The formal version of this page. See /legal/privacy-policy.
It is written for a compliance reviewer rather than a visitor, and says the same thing this page does, in the more conventional shape that document is expected to take.