Privacy Policy (Data Processing & Storage)

We respect your privacy and are committed to protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the UK GDPR, the ePrivacy Directive (Cookie Law), and relevant privacy laws in other jurisdictions, including applicable United States state-level regulations such as the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), and similar state laws.

Our tools are designed with a privacy-first architecture, where most file processing occurs locally in your browser. However, certain third-party services we use — such as advertising and analytics providers — may independently collect data as described in this policy. This document explains what we collect directly, what our partners collect, and what choices you have.

Our application is primarily built as a client-side processing tool.

This means:

• Audio, video and Image conversions are performed directly on your device
• Processing is powered by browser technologies such as WebCodecs
• We do not upload your files to any remote server for conversion
• Your media files remain on your device unless you explicitly choose to download or share them

In most cases, your files never leave your browser environment.

While file conversion is performed locally, we collect limited, non-sensitive usage statistics to improve performance, reliability, and feature development.

These statistics are stored using a lightweight database powered by better-sqlite3 (v12.10.0).

3.1 Data We Store

We may store the following anonymized operational data:

• Conversion ID (internal reference only)
• Output format selected (e.g., MP3, WAV, FLAC)
• Original file name
• File type (MIME or extension)
• File size in bytes
• Processing time (seconds)
• Binary load time (seconds)
• Timestamp of conversion

3.2 What We Do NOT Store

We do NOT store:

• Audio or video file contents
• Uploaded or processed media files
• Personal user accounts (unless explicitly added in future features)
• IP addresses linked to conversion data
• Audio metadata beyond basic file information
• Any sensitive personal data

Under the General Data Protection Regulation and UK GDPR, we process limited technical data under the following legal bases:

• Legitimate Interests: to improve system performance, stability, and user experience
• Performance of Service: to ensure proper functioning of conversion tools
• Consent: for non-essential cookies, advertising personalization, and analytics tracking, where required by applicable law (see Sections 6, 7, and 8)

We only collect the minimum data necessary for these purposes, and we rely on consent specifically for any data processing that is not strictly necessary for the service to function.

We retain server-side statistical data only for as long as necessary to:

• Monitor system performance
• Improve conversion speed and reliability
• Identify and fix technical issues

Data may be periodically aggregated or deleted to reduce storage overhead. Third-party services described below (advertising and analytics) retain data according to their own retention schedules, which we do not control. Please refer to Sections 7 and 8 for links to those providers' own policies.

We use cookies and similar tracking technologies (such as web beacons, pixels, and local storage) for the following purposes:

6.1 Strictly Necessary Cookies

These cookies are essential for the website to function and cannot be disabled:

• Basic site functionality
• Session stability
• Security and fraud prevention

6.2 Analytics Cookies

Used to understand how visitors use our site (see Section 8 — Google Analytics).

6.3 Advertising Cookies

Used to deliver and personalize ads, measure ad performance, and limit how many times you see an ad (see Section 7 — Google AdSense).

6.4 Your Cookie Choices

Where required by law (e.g., under the GDPR/ePrivacy Directive), we display a cookie consent banner allowing you to accept or reject non-essential cookies before they are set. You can also:

• Adjust your browser settings to block or delete cookies
• Use Google's Ads Settings to manage ad personalization
• Opt out of analytics tracking via the methods described in Section 8.4

Disabling certain cookies may affect site functionality or ad relevance, but will not prevent you from using our core conversion tools.

We use Google AdSense to display advertisements on our website. Google AdSense is a third-party advertising service operated by Google LLC ("Google").

7.1 How Google AdSense Works

• Google and its partners use cookies and similar technologies (such as the DoubleClick cookie) to serve ads based on your prior visits to our website or other websites
• Google may use data collected through AdSense to personalize ads shown to you, or to serve non-personalized ads if you have not consented to personalization
• Third-party vendors, including Google, may use cookies to serve ads based on your past visits to this and other websites

7.2 Information Collected by AdSense

Through AdSense, Google may collect:

• Cookie data and unique identifiers
• IP address and approximate location
• Browser type and device information
• Pages visited and ad interactions (impressions, clicks)

We do not have direct access to or control over the specific data Google collects through these cookies. This data is collected and processed by Google in accordance with Google's own Privacy Policy.

7.3 Consent and Opt-Out

• Where required by law (e.g., in the EEA, UK, and similar jurisdictions), we obtain your consent before serving personalized ads, in compliance with Google's EU User Consent Policy
• You may opt out of personalized advertising by visiting Google Ads Settings
• You may also opt out of third-party vendor use of cookies for personalized advertising by visiting www.aboutads.info/choices/
• You can review Google's advertising practices at Google's Advertising Policy page

7.4 Children's Privacy and AdSense

We do not knowingly direct AdSense advertising at children under the age of 13 (or the relevant minimum age in your jurisdiction), and we comply with applicable child-directed advertising restrictions.

We use Google Analytics, a web analytics service provided by Google LLC, to help us understand how visitors interact with our website.

8.1 What Google Analytics Collects

Google Analytics may collect:

• IP address (which may be anonymized/truncated, depending on configuration)
• Browser type and version
• Operating system
• Referring/exit pages and URLs
• Pages viewed and time spent on pages
• Click and interaction events
• Approximate geographic location (city/region level, derived from IP)
• Device type and screen resolution

8.2 How We Use This Data

We use Google Analytics data solely in aggregated, statistical form to:

• Understand site traffic and usage patterns
• Identify popular features or pages
• Improve site performance and user experience
• Diagnose technical issues

8.3 Data Sharing with Google

Data collected via Google Analytics is transmitted to and stored by Google on servers that may be located outside your country of residence, including in the United States. Google may use this data in accordance with its own Privacy Policy and, where applicable, may combine it with other data Google holds about you (e.g., if you have a Google Account and have enabled ad personalization).

We have configured Google Analytics, where applicable, to:

• Use IP anonymization where available
• Disable data sharing for Google's benchmarking features (where configurable)
• Limit data retention periods within Google Analytics settings

8.4 Opting Out of Google Analytics

You can opt out of Google Analytics tracking by:

• Installing the Google Analytics Opt-out Browser Add-on
• Adjusting your cookie consent preferences via our cookie banner (where applicable)
• Enabling "Do Not Track" or similar browser privacy settings (note: not all analytics providers honor these signals)

Our application may rely on the following technologies:

• WebCodecs — browser-native media processing API (local processing only)
• MediaBunny — client-side media handling library (local processing only)
• FFmpeg — LGPL-licensed codecs for fallback processing (local processing only)
• better-sqlite3 — server-side lightweight database engine (operational statistics only)
• Google AdSense — third-party advertising (see Section 7)
• Google Analytics — third-party analytics (see Section 8)

These tools operate under their respective licenses and terms of service, and are used in compliance with applicable requirements. We are not responsible for the data practices of these third parties beyond our integration of their services, and we encourage you to review their respective privacy policies directly:

• Google Privacy Policy
• Google Analytics Terms of Service
• Google AdSense Program Policies

Because our service may be accessed globally, limited technical data — including data collected via Google AdSense and Google Analytics — may be processed in different jurisdictions, including the United States and other countries where Google maintains servers.

We take appropriate safeguards to ensure compliance with:

• GDPR (EU) — including reliance on Standard Contractual Clauses (SCCs) where applicable for transfers outside the EEA
• UK GDPR
• Applicable US state privacy laws (including CCPA/CPRA, VCDPA)
• Other applicable international privacy regulations

Depending on your location, you may have the right to:

• Request access to stored data
• Request correction or deletion of data
• Object to or restrict data processing
• Request data portability (where applicable)
• Withdraw consent at any time (for consent-based processing, including ads and analytics)
• Opt out of the "sale" or "sharing" of personal information for targeted advertising purposes, as defined under CCPA/CPRA
• Lodge a complaint with your local data protection authority

11.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we (and our third-party partners such as Google) collect, to request deletion of that information, and to opt out of the sale or sharing of personal information. Because Google AdSense and Google Analytics may constitute a "sale" or "sharing" of data under CCPA/CPRA definitions, you may exercise your opt-out rights via the methods described in Sections 7.3 and 8.4, or by contacting us directly.

11.2 EEA/UK Residents (GDPR)

If you are located in the EEA or UK, you have the rights listed above under Articles 15–22 of the GDPR. Where we rely on your consent for cookies, advertising, or analytics, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, you may contact us using the support channel provided on our website.

We implement reasonable technical and organizational measures to protect data, including:

• Minimal data collection by design
• Local-first file processing architecture
• Restricted database access for server-side logs
• Secure infrastructure practices
• Use of HTTPS/TLS encryption for data in transit

However, no system can guarantee absolute security, and we cannot guarantee the security of data once it is transmitted to third-party services such as Google.

Our service is not directed at children under the age of 13 (or the relevant minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action, including requesting deletion from relevant third-party services.

Some browsers offer a "Do Not Track" (DNT) feature. Because there is no industry-standard interpretation of DNT signals, our site does not currently respond to DNT browser signals. You can still manage tracking through the opt-out tools described in Sections 6.4, 7.3, and 8.4.

We may update this Privacy Policy from time to time to reflect:

• Technical improvements
• Legal requirements
• Feature updates
• Changes to our use of third-party services such as Google AdSense or Google Analytics

We encourage you to review this policy periodically. Continued use of the service after updates means acceptance of the revised policy.

If you have questions about this Privacy Policy or wish to exercise any privacy rights described above, please contact us through the support channel provided on our website.