Operator details still required: this notice accurately describes the deployed file handling, but the operator’s legal name, mailing address and jurisdiction must be added after legal review.
Tools that stay on your device
All PDF, image, CSV and local XLSX tools run in your browser. The selected files are read by code on your device and are not sent to the conversion API or analytics endpoint. Your browser or operating system may keep its own recent-file and download history.
Temporary Office conversion
Word to PDF and Excel to PDF upload the selected file over HTTPS to a server in Beauharnois, Canada. The service checks its structure, scans it for malware and converts it in a network-disabled Office container. Only one conversion worker runs at a time.
The input is deleted after conversion. A ready output is available for about 15 minutes. Every job directory is removed no later than 60 minutes after upload, including failed, cancelled and abandoned jobs. Conversion job directories are excluded from backups.
Download access
A random capability token controls job status and downloads. The raw token is returned to the browser and only a keyed digest is stored by the service. Someone who obtains the token while the job is active may be able to access the result.
First-party aggregate analytics
The site records allowlisted events such as page views, landing paths, referrer domains, tool selection, conversion outcomes, safe error codes, coarse file-size and duration buckets, Core Web Vitals and broad device, browser and operating-system families. It does not store document content, filenames, form values, capability tokens, download URLs, raw IP addresses or full user-agent strings.
The server immediately converts the connecting address into a keyed identifier that changes daily, then discards the source value. A random browser session identifier is also re-keyed daily before storage. Query strings are removed from page and referrer values, apart from the allowlisted campaign fields utm_source, utm_medium and utm_campaign on a landing page. Detailed rows are deleted after 90 days. Analytics uses local SQLite storage on the Canadian server and is not sent to a third-party analytics service.
The analytics client sends nothing when the browser’s Do Not Track value is 1. It also honours a first-party analytics_opt_out=1 cookie if you set one. Analytics failures never block a conversion.
Technical data
The API also derives a daily keyed bucket for rate limiting. The web server and infrastructure providers may process ordinary operational data such as an IP address, timestamp, requested route and user agent. Uploaded content, multipart bodies, original filenames, capability tokens and converted content are not intentionally logged.
Accounts, cookies and advertising
There are no user accounts or conversion histories. The analytics system uses session storage rather than an account identifier and does not require a first-party cookie.
Advertising is not active because no AdSense publisher ID is configured; no AdSense script or advertising cookie is loaded. If advertising is enabled later, this notice and the required certified consent-management flow must remain accurate.
Infrastructure providers
OVHcloud hosts the server in Canada. Porkbun provides domain registration and authoritative DNS. Caddy and Let’s Encrypt provide HTTPS certificate automation. Redis stores temporary queue and status data only; it is not permanent customer storage.
Your choices
Use a browser-only tool or approved local application for especially sensitive material. Do not upload a document you are not authorised to process. An active server job can be cancelled from the tool page.
No support channel
No public support email or contact form is offered. Because there are no accounts or conversion histories, expired files and previous results cannot be located or restored.
Last updated: 21 August 2026.