Privacy by design

Your files are processed in your browser

Supported tools read and transform files inside this browser tab. Filenames and file contents are never transmitted to ConvertRS.

Browse private tools

Local processing

The Rust/WebAssembly engine and browser APIs process supported conversions on your device. There is no upload to a conversion server.

Cross-page handoff

When one tool opens another, it can place the file in browser IndexedDB for a single read. The entry expires after five minutes and is deleted when read or when expired entries are swept.

Limited analytics

Production pages may load cookieless Rybbit. Conversion events permit formats, coarse size ranges, interface state, and aggregate processed-file counts. Public-link events permit only source path, destination path, locale, and a fixed link placement. Analytics never includes filenames, file metadata, content, user identifiers, or free-form text.

Local typography

DM Sans is served by ConvertRS as a local font file. Loading the typeface does not request Google Fonts or include filenames, file content, or conversion data.

When analytics is blocked

Navigation and tools continue to work when a blocker prevents Rybbit from loading. Links remain ordinary HTML links, and the primary typeface is served by ConvertRS.