Privacy Policy
Last reviewed: March 2026
FreeConversion processes your PDF files entirely inside your browser using WebAssembly. Your files are never uploaded to any server. This page explains what limited data we do collect, why, and what rights you have over it.
1. File processing — no server involved
Every PDF you compress, merge, or convert on FreeConversion is handled by a WebAssembly module running locally in your browser tab. The file is read from your device into browser memory, processed, and made available for download — all without any network transfer. Our servers receive no part of your document at any point.
As a result, we hold no file data, no document metadata, and no processing history linked to you. There is nothing to delete, export, or rectify on the file side.
2. Cookies and tracking
We use the following categories of cookies:
| Cookie / service | Purpose | Retention |
|---|---|---|
| Google Analytics (_ga, _gid) | Aggregate traffic measurement (page views, session duration, country). No document content is ever sent. | _ga: 2 years · _gid: 24 hours |
| Google AdSense | Ad personalisation and frequency capping. Governed by Google's own privacy policy. | Up to 13 months |
| Functional (localStorage) | Remembers UI preferences (e.g. compression level last selected). Stored only on your device. | Until you clear browser storage |
Analytic and advertising cookies require your consent where required by applicable law. You can withdraw consent at any time by clearing cookies in your browser settings or using a browser extension such as uBlock Origin.
3. Third-party processors
We rely on the following sub-processors to operate the site:
- Vercel Inc. — hosts the web application and serves static assets. Vercel may log anonymised request metadata (IP address truncated, user-agent, timestamp) for security and abuse prevention. Vercel is SOC 2 Type II certified.Vercel Privacy Policy ↗
- Google Analytics (Google LLC) — aggregate usage statistics. Data is pseudonymised and IP addresses are anonymised before storage.Google Privacy Policy ↗
- Google AdSense (Google LLC) — ad serving. Governed by Google's privacy policy and the IAB TCF consent framework.
- Sanity.io — headless CMS for blog posts, FAQs, and landing page content. Sanity stores only editorial content (no user data).Sanity Privacy Policy ↗
No processor listed above receives any content from your PDF files.
4. Data retention
- PDF files: never stored — processing is entirely in-browser.
- Analytics data: retained by Google for 26 months, then automatically deleted.
- Server request logs (Vercel): retained for up to 30 days for security purposes.
- Support emails: retained for as long as necessary to resolve your enquiry, then deleted.
5. Your rights under GDPR
If you are located in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR Articles 15–22):
- Right of access (Art. 15) — request a copy of any personal data we hold about you.
- Right to rectification (Art. 16) — ask us to correct inaccurate personal data.
- Right to erasure (Art. 17) — request deletion of your personal data.
- Right to restriction (Art. 18) — ask us to limit how we process your data.
- Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
- Right to object (Art. 21) — object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent (Art. 7) — withdraw consent for cookie-based processing at any time without affecting prior processing.
To exercise any of these rights, email support@free-conversion.com. We will respond within 30 days. Because we hold no file data, most requests will confirm that we have no personal data to act on beyond analytics identifiers.
You also have the right to lodge a complaint with your national data protection authority (e.g. the CNIL in France, the ICO in the UK, or the relevant authority in your country).
6. Children
FreeConversion is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
7. Changes to this policy
We may update this policy to reflect changes in our practices or legal requirements. The "Last reviewed" date at the top of this page will be updated accordingly. Continued use of the site after a change constitutes acceptance of the revised policy.
8. Contact
For privacy-related questions or to exercise your rights: support@free-conversion.com
For security vulnerabilities: see security.txt