Privacy policy
Your images never leave your device, there are no accounts, and no advertising or analytics trackers run on these pages.
Who this policy covers
This policy applies to jpg-heic.com and every page on it. This is a personal site, run independently by one person rather than by a company, and there is no team, no investor and nobody else with access to it. Whatever little information the site touches is described below, and any question about it goes to one address: contact@jpg-heic.com.
Because the site holds no accounts and receives no files, there is no database of users to protect and no internal access to control. That is a deliberate design choice rather than a policy promise: the safest data is the data that was never collected.
Your images are never uploaded
This is the most important thing on this page, so it comes first. Files you convert are not transmitted anywhere. When you select or drop a file, the browser reads it from your own disk. Decoding and encoding both happen inside the tab, using a WebAssembly decoder and your browser's built-in image encoder. The download you receive points at a blob held in your browser's memory.
Because no image data is sent, there is nothing for this site to store, inspect, share, sell or lose in a breach. This is a property of how the tools are built rather than a promise about how received data is handled.
You do not have to take our word for it. Open your browser's developer tools, switch to the Network tab and convert a file — you will see the page and its scripts load, and no upload afterwards. Or load the page, disconnect from the internet, and convert anyway. It still works.
What is collected
| Data | Why | Kept for |
|---|---|---|
| Page requested, date and time | To see which pages are useful | Up to 30 days |
| Referring page | To understand how people arrive | Up to 30 days |
| Browser and operating system | To test against what people actually use | Up to 30 days |
| Truncated IP address | Abuse prevention and rough location | Up to 30 days |
| Your email and message | Only if you choose to write to us | Until resolved |
These are standard web server logs, generated automatically by the hosting provider. There are no accounts, no sign-ins, no newsletter, no profile built about you, and no attempt to identify individual visitors.
Cookies and local storage
This site sets no cookies of its own and stores nothing in local storage or session storage. There is no consent banner because there is nothing to consent to. Your converter settings — quality, output format, size — are held in memory only and are gone when you close the tab.
Third parties
None. Every asset this site needs — fonts, stylesheet, the conversion library, icons — is served from jpg-heic.com itself. No request goes to any other company when you load a page or convert a file.
This is deliberate. Embedding Google Fonts or a public CDN transmits your IP address to that provider on every page view, which is personal data under the GDPR and has been treated as such by European courts. Self-hosting removes the transfer entirely rather than trying to justify it.
| Previously loaded from | Now |
|---|---|
| Google Fonts | Self-hosted WOFF2 files under /fonts/ |
| jsDelivr CDN | Self-hosted libraries under /lib/ |
Check it yourself. Open your browser's developer tools, switch to the Network tab, reload any page and convert a file. Every request is to jpg-heic.com. There is no analytics call, no font request, no CDN fetch and no upload.
The site is served by a hosting provider that processes requests on our behalf and generates the server logs described above. No other processor is involved.
Legal basis and your rights
Where the UK GDPR or EU GDPR applies, server logs are processed on the basis of legitimate interests — keeping the site running, secure and useful. Correspondence you send is processed on the basis of your own request.
You have the right to ask what is held about you, to have it corrected or erased, to object to processing, and to lodge a complaint with your national data protection authority. There is very little to act on, since logs are short-lived and not linked to any identity. Requests go to contact@jpg-heic.com.
Under the CCPA and similar US state laws: no personal information is sold or shared for cross-context behavioural advertising, and there is no financial incentive programme.
A note about photo metadata
Photographs routinely carry GPS coordinates accurate to a few metres, along with the camera model and the moment the shutter fired. Nothing of that survives conversion here: the encoder receives pixels and nothing else, so the file you download has no EXIF block at all. That is a useful side effect before posting a photo publicly. The metadata page shows how to check what a file is carrying, and how to strip location data on the device itself.
Children
This site is a general-purpose utility and is not directed at children. No age information is requested and no accounts exist, so no data about children is knowingly collected.
Changes to this policy
If this policy changes, the revision date at the foot of the page changes with it. Material changes — new third parties, new data collected — will be described here rather than made quietly.
Common questions
- Do you upload or store my photos?
- No. There is no upload step, so there is nothing to store. Conversion happens inside your browser tab and files never leave your device. You can verify this in your browser's network tools.
- Does this site use cookies?
- No cookies are set by this site, and nothing is written to local or session storage. That is why there is no consent banner.
- Do you use Google Analytics, Google Fonts or any third-party service?
- No. Fonts, scripts and the conversion library are all served from this domain, so loading a page sends no request to any other company. There are no analytics, advertising or social widgets.
- What personal data can I ask you to delete?
- Very little exists to begin with: short-lived server logs with a truncated IP address, and any email you have sent. Requests go to contact@jpg-heic.com.