Skip to content

Privacy

Your files never leave your device.

A file you drop here is read and converted by your own browser. There is no server to send it to, and you can check that yourself in a minute.

This page is about the web site. Nothing here is a promise we cannot show.

How it works, and how to check.

  • What happens to a file

    You drop a file and your browser opens it. The converting code runs inside the page, in the browser's own background workers for pictures, and the result is saved from the page to your downloads. The site is a set of static files. It has no upload address and no database.

  • Check it yourself

    Open your browser's developer tools and choose the Network tab. Drop a file and convert it. You will see the page's own code and encoders load the first time you use them, one small request to analytics.flex.movie, our own page-view counter, and no request that carries your file.

    Then turn the network off, in airplane mode or in the Network tab, and convert again. Once the page and the encoder you need have loaded, it keeps working.

    Last, look at the page's response headers. The content security policy allows connections only to this site, to our own analytics at analytics.flex.movie and to the browser's own memory (connect-src 'self' https://analytics.flex.movie blob: data:), so the browser itself refuses to send your file anywhere else.

  • What is stored on your device

    Your theme choice and the settings you used last, such as a target size, are kept in your browser's local storage so the page remembers them. A copy of the site's code is kept in the browser's cache so the page can work offline. When you carry files from the home page to an editor, they wait in the browser's own database for up to a minute and are removed when the editor takes them.

    None of this is sent to us. Clearing the site's data in your browser removes all of it.

  • What there is not

    There are no accounts, no advertising and no tracking pixels on these pages. We count visits with Umami, a privacy-friendly counter we host ourselves. It uses no cookies, stores nothing on your device, does not follow you from site to site and does not know who you are. It only counts how many people open which page, with the referring site, browser, operating system, device type, screen size, language and approximate location. Visits are told apart by an anonymous code that changes every month, and your IP address is not stored. It never sees a file or what you do with it.

  • What we cannot hide

    Like any web site, the host that serves these files can see that a page was requested, as it can for every site you visit. It never sees your files, because they are not sent.

Questions