Privacy Policy
Last updated: November 1, 2026
At ConvertFoto, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our free online image conversion tool.
Information We Collect
Information You Provide
When you use our contact form, we collect the information you voluntarily provide, such as your name, email address, and message content.
Automatically Collected Information
We may automatically collect certain technical information when you visit our website, including:
- IP address and browser type
- Operating system
- Date and time of your visit
- Pages viewed and time spent on our site
- Referring website
How We Use Your Information
We use the information we collect to:
- Provide and maintain our service
- Respond to your inquiries and provide customer support
- Improve our website and user experience
- Analyze usage patterns and trends
- Detect and prevent technical issues
Image Processing and Privacy
One of our core privacy principles is that your images never leave your device. All image processing, including conversion, resizing, and compression, happens directly in your browser using JavaScript. This means:
- Your images are never uploaded to our servers
- We don't store or have access to your images
- Your images remain completely private and secure
YouTube, Facebook, and Kick downloads
The YouTube, Facebook, and Kick downloaders send the video URL and chosen quality to our server. The server contacts the selected video platform and temporarily stores the video so you can download it. Download files and job details expire after one hour. Your IP address is used in temporary rate-limit records to prevent excessive requests. Download links contain a private, random identifier; anyone you share that link with can access the file until it expires.
We do not request your YouTube, Facebook, or Kick password or account cookies. Normal web-server access logs may contain your IP address and download request paths. The browser-based image tools and PDF editor do not use this video download service.
PDF to Word conversion
The PDF to Word tool uploads your PDF and conversion settings to our server. Text extraction and OCR run on our server; document contents are not sent to an external OCR API. The original upload, temporary processing files, and Word output are kept outside the public website directory. Source PDFs and temporary processing files are removed when conversion ends. Word downloads expire one hour after completion, and the worker removes expired files during its regular cleanup. You can also choose Delete files now.
A necessary session cookie binds conversion status, downloads, and deletion to your browser session. The current job identifier and filename may be kept in that tab's session storage so a page refresh can restore progress. The worker uses a keyed hash of your network address for temporary request limits. Normal hosting access logs can still contain connection details and request paths. Files you download to your device remain there until you delete them.
The browser-based image tools and PDF editor continue to process files locally; PDF to Word uses server processing. OCR and layout reconstruction can introduce mistakes, so review the converted document before using it.
YouTube summaries and pasted transcripts
When you submit a request in the YouTube Summarizer, ConvertFoto sends the public video link or pasted transcript, together with your chosen summary length and language, to Google's Gemini API. Typing or pasting alone does not submit the content. Link mode sends a standard YouTube video address without sharing parameters; transcript mode sends the text you provide.
Successful public-video summaries can be reused for up to 24 hours from private server storage. Expired entries stop being served and are removed on the next successful storage update. Pasted transcripts and their summaries are not saved in this tool's persistent storage or application logs. The tool does not save inputs or summaries in browser storage. Clearing the page removes the visible content; copies or TXT files you choose to save remain on your device.
External processing is not confined to your browser. Under Google's unpaid API terms, submitted content and generated responses may be used to improve Google's products and may be reviewed by people. Different data terms apply to paid API service. See the Gemini API terms. Do not submit personal, sensitive, or confidential information. This tool is intended for adults aged 18 and over.
Usage limits use daily keyed hashes of network identifiers, request counts, and times rather than raw IP addresses or transcript text. These counters reset on the next successful storage update after the UTC day changes. People on the same network may share an allowance. Normal hosting access logs may still contain connection details and request paths.
AI text analysis and tool ratings
When you choose Analyze Text in the AI Text Detector, your passage is sent to ConvertFoto's server and an external text-analysis service. Typing and pasting do not send the passage for analysis. The tool does not save your submitted text or individual result in its database, browser storage, page URL, or application logs. The passage remains on the page until you clear it or leave. Hosting infrastructure and the external service process requests under their own policies; we do not promise that processing is anonymous or that the external service never retains data. Avoid submitting confidential information.
Daily usage counters use keyed hashes of network identifiers and contain request counts and times, without the submitted text or raw IP address. These counters reset on the next request after the UTC day changes. People sharing a network may share a usage allowance. Standard hosting access logs may still record connection information.
The rating form uses an anonymous cookie called cf_ai_text_rating, lasting up to 365 days, to remember a browser's vote. It stores a one-way digest of that identifier and the selected star rating in private server storage. Updating your vote replaces its previous score. Daily hashed network identifiers and short-lived counters help prevent excessive rating submissions and are removed on the next submission after expiry. Ratings remain until removed by the site operator. Clearing or losing the cookie does not delete your previous vote, and you will no longer be able to update that vote from the browser. Only the average and total number of votes are public.
WhatsApp profile picture lookup
The WhatsApp DP downloader sends the phone number you enter to our server and GREEN-API to request the current profile picture available to the connected WhatsApp account. Unlike the browser-only image editing tools, this lookup uses a server and an external provider. Availability depends on the profile owner's settings and provider access.
The lookup code does not save phone numbers or images to disk or browser storage. Pictures are processed in server memory and the browser's temporary memory. Preview links are signed, expire after five minutes, and allow anyone holding the link to retrieve that image until expiry. Temporary rate-limit records use hashed IP identifiers. Our hosting infrastructure and GREEN-API may process request data under their own policies; the service does not promise anonymity.
Only request or reuse pictures you are allowed to access and save. The tool does not retrieve profile history, send messages, or change your contacts. Contact us with questions about this processing.
Instagram downloads
The Instagram downloader and Story Viewer send your submitted public post, profile or Story URL, or Story username, to our server. Story lookups send the requested username through RapidAPI to the Instagram Viewer API provider to retrieve available public Stories. Our server downloads returned media from Instagram's media hosts; this processing is not confined to your browser. We do not forward your IP address to RapidAPI or the Story provider in these API requests. They receive our server's connection and process requests under their own policies. The service does not request your Instagram password or session cookies and does not provide access to private content.
Prepared files are stored temporarily outside the website's public directory and expire after one hour. Anyone holding a generated download link can access its file until expiry. Jobs and IP-based rate limits are kept in worker memory; normal web-server access logs may also record requests. A server restart removes active job records and cleans old job directories. Our hosting infrastructure and Instagram process connections under their own policies.
If you rate the Story Viewer, the worker stores your score, its update time and a salted hash of your network identifier in a private database. Raw IP addresses are not stored in the ratings database. One rating is kept per network and can be updated; ratings remain until removed by the site operator, including across service restarts. The browser also remembers your selected score in local storage. Clearing browser storage removes that preference, but does not delete the server rating. The public average and count include submitted ratings without displaying network identifiers.
Save only content you are permitted to access and reuse. Contact us with questions about this processing.
Cookies and Tracking
We use cookies and similar tracking technologies to enhance your experience on our website:
- Essential Cookies: Required for the website to function properly
- Analytics Cookies: Help us understand how visitors interact with our website
- Preference Cookies: Remember your settings, such as language and theme preferences
You can control or disable cookies through your browser settings.
Third-Party Services
We may use third-party services to enhance our website functionality:
- Google Analytics: To analyze website traffic and usage patterns
- Google Fonts: To provide typography for our website
- CDN Services: To deliver content efficiently
These third-party services have their own privacy policies, and we are not responsible for their practices.
Data Security
We implement appropriate security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
- Email: convertfoto25@gmail.com
- Contact Form: Contact Us