Privacy Policy & Security
Transparency is our core value. This policy explains how we process your files entirely on your device, ensuring zero data collection.
Last checked: 3/26/2026
1. No Data Collection
We operate with a strict zero-knowledge policy. We have designed our application so that we physically cannot access your files.
- 🚫 No Server Uploads
Your files are never sent to our servers. All conversions happen locally in your browser.
- 🚫 No User Accounts
We do not require registration, login, or personal information to use our tools.
- 🚫 No File Logging
We do not track filenames, file sizes, or file content metadata.
- 🚫 No Facial Recognition
We do not scan images for faces or biometric data.
2. How It Works (Client-Side Processing)
Unlike traditional online converters that require you to upload your sensitive documents to a remote server, xyzconverter uses advanced web technologies (WebAssembly and modern Browser APIs) to process your files strictly within your device's memory.
The Journey of Your File:
- You select a file from your device.
- Your browser grants temporary access to that specific file.
- The conversion code runs locally on your CPU/GPU.
- The converted file is saved directly back to your device.
- At no point does the file leave your computer or phone.
3. GDPR Compliance
We are fully committed to the principles of the General Data Protection Regulation (GDPR). Our unique architecture serves privacy by design:
Lawful Basis
Since we do not collect or process personal data on our servers, strict "lawful basis for processing" (like consent or legitimate interest for data storage) does not apply to file content—because we never grasp it.
Your Rights
- Right to Access/Rectification: Not applicable (we hold no data to access or fix).
- Right to Erasure ("Right to be Forgotten"): You do not need to ask us to delete your files because we never had them.
- Right to Portability: Your files remain on your device, ensuring full portability at all times.
4. Security Information
Security is built into the architecture of our application.
- HTTPS Encryption: Our website is served exclusively over HTTPS, ensuring the integrity of the application code delivered to your browser.
- Sandboxed Environments: Conversions operate within the secure sandbox of your modern web browser.
- Third-Party Libraries: We use open-source libraries (e.g., for PDF and image processing) that run client-side. We regularly audit these dependencies for security vulnerabilities.
5. Analytics & Hosting
We use minimal, privacy-friendly analytics to understand general usage patterns (e.g., "Total PDFs converted").
- No Personal Identifiers: We do not use "fingerprinting" or collect IP addresses for tracking.
- Hosting: This website is hosted on a secure global CDN. The host may collect standard server logs (like non-identifiable access times) for security and reliability purposes.
Privacy Questions?
If you have technical questions about our implementation or specific privacy concerns, please open a discussion on our development repository.
Contact via GitHub