This Privacy Policy explains what information HEIC to JPG (https://heictojpg.cyou, “we”, “us”) processes when you use the website, and the choices you have. In short: your photos never leave your device, and we do not collect personal information to run the converter.

1. Your photos

The converter runs entirely in your web browser. When you add a HEIC photo, it is read and converted to JPG on your own device. Your photos, their contents, their file names and their metadata (such as location, date or camera details) are never uploaded to us or to anyone else. The converted JPG files exist only on your device until you save or close them. The JPG files we create do not include the original EXIF metadata, so location data is removed.

2. Anonymous usage statistics

After a batch of conversions, your browser sends us a small anonymous report so we can measure how the tool is used and fix problems. For each conversion it contains:

  • the original file size and the JPG file size;
  • how long the conversion took, and whether it succeeded (or a short error code);
  • the date and time.

From the request itself we also record your country (provided by Cloudflare), a device type (desktop, mobile or tablet), and the name of your browser and operating system. We do not store your IP address, your full browser “user agent”, file names or any image data, and we do not use these statistics to identify you.

These statistics are stored with Cloudflare (Cloudflare D1). Detailed records are deleted automatically after 90 days; only daily totals are kept.

2a. Google Analytics

We may use Google Analytics (Google LLC / Google Ireland Ltd.) to understand how visitors find and use the website, for example which pages are visited and how many photos are converted (only the number, never the photos). Google Analytics uses cookies such as _ga and processes your IP address, which Google shortens before storing. Google Analytics is loaded only after you interact with the page, and where the law requires it only after you accept cookies. You can opt out with the Google Analytics opt-out browser add-on. Learn more in Google’s Privacy Policy.

3. Cloudflare

Our website is delivered through Cloudflare, Inc., which provides content delivery and security services. To protect the site against attacks and abuse, Cloudflare processes technical data such as your IP address and may set strictly necessary security cookies (for example __cf_bm). Learn more in Cloudflare’s Privacy Policy.

4. Server logs

Like almost every website, our web server may keep standard technical logs (such as IP address, date and time, requested page and browser type) for a short period to keep the service secure and working. These logs are not used for advertising or profiling.

5. Advertising

We show advertising to keep the tool free. Our advertising partners may use cookies, local storage or similar technologies to show ads, measure their performance and limit how often you see them. These partners process data under their own privacy policies. Where the law requires it, we ask for your consent before such technologies are used. You can also block or delete cookies in your browser settings and use the opt-out tools offered by the advertising industry, such as Your Online Choices (EU) or the DAA opt-out page (US).

6. Your preferences

If you choose light or dark mode, your choice is saved in your browser’s local storage so the site remembers it. It never leaves your device.

7. Legal bases (EU/UK visitors)

We process the limited data described above on the basis of our legitimate interests in operating, securing and improving the website (anonymous statistics, security and server logs) and, where required, your consent (advertising cookies).

8. Your rights

Depending on where you live (for example under the GDPR or the CCPA), you may have the right to access, correct or delete personal data, to object to or restrict its processing, to withdraw consent and to complain to a data protection authority. Because we do not keep data that identifies you, we usually cannot link any records to you, but you can contact us at any time with questions.

9. Children

The website is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information.

10. Changes

We may update this policy when the website changes. The “Last updated” date at the top of this page shows when it was last revised.

11. Contact

For privacy questions, email support@heictojpg.cyou.