Your files stay on your device
Every file conversion on FormatFixer happens inside your browser using JavaScript and WebAssembly. When you drop a file into a converter, its contents are read by your own browser, transformed in memory on your own computer, and written back out as a download. No part of the file is sent to FormatFixer, and FormatFixer has no server capable of receiving it.
This applies to every converter on the site — image, video, audio, subtitle, GPS, contacts, calendar, and every format family we add in the future. You can confirm the behavior directly: open your browser's developer tools, switch to the Network tab, and perform a conversion. You will not see an upload. You can also use the site with your connection turned off after the page has loaded.
What we don't collect
Because conversion happens locally, the following are never collected, transmitted, or stored by FormatFixer: the contents of any file you convert; filenames or file metadata; any identifiable data inside your files (EXIF, contact details, GPS coordinates, calendar entries, subtitle text).
We do not operate any account system. We do not ask for your email to use the tools. We do not store conversion history. We do not build a profile of which converters you use.
What is collected
Our hosting provider (Firebase Hosting, operated by Google) logs standard server request data when your browser fetches a page: IP address, user agent, timestamp, and referring URL. This is the minimum needed to serve a website. These logs are retained according to Google's policies and are not correlated with any identifying account on our side because we have none.
We use a privacy-respecting analytics script to count visits per page (pageviews only — no fingerprinting, no cross-site tracking). This helps us prioritize which converters and format families to build next.
Advertising
FormatFixer displays ads served by Google AdSense. Google and its advertising partners may set cookies and read browser identifiers to serve personalized or non-personalized ads, subject to your jurisdiction's consent requirements. Where required by law (EU/UK/EEA), a consent banner gives you control over advertising cookies before any are set.
Google's use of advertising cookies enables its partners to serve ads to your device based on your visits to this site and others across the internet. You can opt out of personalized advertising at a Google level via adssettings.google.com, or on a per-vendor basis via youradchoices.com and youronlinechoices.eu.
Ad requests themselves are sent from your browser to Google's servers, not through FormatFixer. We do not see what ads are shown to you, and we do not receive personally identifying information from the ad system.
Third-party resources
Each page loads the Outfit typeface from Google Fonts and, for applicable converters, fetches the ffmpeg.wasm engine from unpkg.com on first use. These requests expose your IP address and user agent to the respective providers, as is standard for any website that uses web fonts or a CDN.
No third-party script on FormatFixer receives the contents of files you convert. The ad script, the fonts, and the conversion engines are entirely separate code paths.
Children
FormatFixer is a general-audience utility with no account system. We do not knowingly collect any information from children under 13 (or under 16 in the EU/UK), because we do not knowingly collect identifying information from anyone. If you believe a child has had data collected through this site, please contact us and we will investigate.
Contact
Questions about this policy, or requests related to your data under GDPR, CCPA, or any other applicable regime: privacy@formatfixer.app. We aim to respond within 30 days.