Privacy Policy — CloudlessConvert

Who this policy covers

CloudlessConvert (cloudlessconvert.com) is operated by MatrixInn Solutions. This policy explains what happens to information when you use the site. If anything here is unclear, contact us and we'll clarify — and likely rewrite the section so the next person doesn't have to ask.

Your photos: the short version

They are never uploaded. Conversion runs entirely in your browser using standard Web APIs — the same technology your browser already uses to display images. No copy of any image you convert is transmitted to us, stored by us, or seen by us, at any point. This isn't a policy promise we're asking you to trust blindly; it's a consequence of how the site is built, and the About page explains exactly how to verify it yourself using your browser's own developer tools.

What we count: conversion totals

The one thing your browser does tell our server, after a conversion finishes, is a single anonymous signal: which format it converted from and to — for example, "a HEIC-to-JPG conversion happened." That request carries no file content, no filename, no image dimensions, and nothing that identifies you or your device. We use it only to see, in aggregate, which conversions people actually use, the same way the server logs below tell us which pages get visited.

This does not change the promise above: your photo itself is never part of that request, never leaves your browser, and this signal fires only after the conversion has already completed entirely on your device. The same format-pair information is also sent to Google Analytics, as described under Analytics below.

What we do receive: server logs

Like essentially any website, the server that delivers these pages to your browser keeps a standard access log — the kind every web server produces by default. For each request, this can include your IP address, the page requested, the time of the request, your browser's user-agent string, and the referring page. It is not linked to any account (there are no accounts), and none of it relates to the images you convert, since those never reach the server in the first place.

We use these logs for two things: keeping the server healthy (diagnosing outages, understanding load, spotting abuse), and producing an aggregate traffic report so we can see which pages people actually find useful. That report is generated on our own server, is not public, and anonymises IP addresses — it tells us "this page got 40 visits," never "this person visited." No third party is involved in producing that report.

These logs are not sold or shared, and are not used for advertising. They rotate and are deleted automatically after 90 days rather than being kept indefinitely.

Cookies and local storage

The only cookies this site sets are Google Analytics cookies (named _ga and _ga_ followed by an ID), which let Analytics tell one visit from another. They hold a random identifier, not your name or anything about your files, and expire after up to two years.

In the EEA, the UK and Switzerland, these cookies are not set unless you choose Accept in the banner shown on your first visit. Until then, Google receives only cookieless signals that cannot be tied to you across visits.
Elsewhere, they are set by default. You can turn them off at any time using Cookie settings at the bottom of every page.

Your choice itself is remembered in your browser's local storage under the name cc-consent, so we do not ask again on every page. Nothing about the images you convert is ever written to cookies or storage.

Fonts, scripts and other resources

Every font, conversion library and script needed to show a page or convert an image is hosted on this same domain. We deliberately avoided pulling fonts from Google Fonts or libraries from a public CDN, because doing so would quietly send your IP address to a third party on every page load. The one exception is the Google Analytics script, loaded from googletagmanager.com and described below. The site does not need it to work — conversion runs the same with it blocked.

Advertising

We intend to support this free tool with advertising, including Google AdSense. If and when ads are active on this site:

Google and its advertising partners may use cookies or similar technology to serve ads and measure their performance. This is separate from, and unrelated to, image conversion — it concerns only the pages you view, not the files you convert.
If you are in the EEA, the UK, or Switzerland, you will be shown a consent choice before any personalised advertising cookies are set, through a consent management platform integrated with the IAB's Transparency and Consent Framework, as Google's publisher policies require. Declining does not prevent you from using the converter.
You can see and control the data Google uses for ad personalisation at adssettings.google.com, and read Google's own explanation of how it uses data from sites that use its services at policies.google.com/technologies/partner-sites.

This section is written in advance of turning ads on, so the policy is accurate from day one rather than needing a rewrite once they launch. If our advertising setup ends up differing from what's described here, we'll correct this section to match reality.

Analytics

We use Google Analytics 4 to understand which pages and tools people actually use, so we know what to improve. When you visit, Google Analytics receives:

the pages you view, the page that referred you, how far down a page you scroll, clicks on links to other websites, and roughly how long you stayed;
your device type, browser and approximate location (country or city), which Google derives from your IP address — Google Analytics 4 does not log or store IP addresses themselves;
a few events we send ourselves: that a conversion happened (the source and target format, whether you used quality or target-size mode, the target size in KB, and whether it was reached), that a download button was used, and the type of any conversion error.

It never receives your images, their filenames, their contents or their metadata. Those stay in your browser exactly as described at the top of this page.

Google processes this data under its own policies, explained at policies.google.com/technologies/partner-sites. We keep Analytics' event-level data for the shortest retention period Google offers. Advertising features and Google signals are not enabled. You can opt out with Cookie settings at the bottom of any page, by blocking cookies in your browser, or with Google's opt-out browser add-on.

We also still read our own server's access logs, as described above, and the first-party conversion-format count.

Children's privacy

This site is not directed at children under 13, does not knowingly collect personal information from them, and has no account system that would allow anyone to register regardless of age.

Your rights

Because we don't hold accounts, files, or a database of personal data tied to individuals, there is generally nothing of yours for us to export or delete on request. Your visit is recorded only in the server logs, which age out on their own, and in Google Analytics under a random identifier we cannot link to you — clearing your cookies or declining in Cookie settings stops even that. If you believe we hold something about you that this policy doesn't account for, tell us and we'll look into it and respond honestly, including if the answer is "no, we don't have that."

Changes to this policy

When this policy changes in a way that matters — a new data use, a new third party, a new category of information collected — we'll update the date at the top and describe the change here rather than silently editing it.

Contact

Questions about this policy: matrixinnsolutions@gmail.com, or see the Contact page.