Privacy Policy

The short version

Your photos never leave your device. heic2jpeg.app converts HEIC files entirely inside your browser using JavaScript and WebAssembly. We have no servers that receive, store, or process your images. We physically cannot access your files — not as a policy choice, but because the architecture never transmits them anywhere.

How image processing works

When you drop a HEIC file into the converter, it is decoded in memory on your own device using libheif-js, a WebAssembly port of the open-source libheif library. The decoded pixel data is rendered to an HTML5 Canvas element in your browser, and the Canvas API exports the result as JPEG, PNG, or WebP. The converted file is then made available for download directly from your browser's memory — no upload, no intermediate server, no cloud storage. Once you close the tab, the data is gone.

This architecture was chosen specifically because it eliminates the privacy risks associated with server-side conversion. We never have custody of your files, so there is nothing to breach, subpoena, accidentally expose, or sell. Zero data retention is not a promise we make — it is a technical reality.

What we collect

We do not collect, store, or transmit any personal data or file content. Specifically:

• Your photos and files are processed locally in your browser only
• No image data is ever sent to any server
• No account or sign-up is required
• We do not collect your name, email address, or any identifying information
• We do not use session cookies to track you across visits

Analytics (Google Analytics 4)

This site uses Google Analytics 4 to understand aggregate traffic patterns. GA4 collects anonymized data including page views, session duration, country of visit, browser type, and device type. This data helps us understand how the tool is being used and whether it is working correctly — for example, whether mobile users are having a different experience than desktop users.

GA4 does not receive any image data or file content. It cannot see what you convert or what your files contain. The data collected is aggregate and anonymized — we see that "500 users visited today from the United States," not anything about individual users. Google's collection and use of this data is governed by Google's Privacy Policy.

Advertising (Google AdSense)

This site displays ads served by Google AdSense. AdSense uses cookies and similar technologies to serve ads that are relevant to your interests, based on your browsing activity across other websites. This is how the site generates the revenue that keeps it free and without usage limits. The ads we display are determined entirely by Google — we do not target, profile, or track users ourselves.

You can opt out of personalised advertising by visiting Google's Ad Settings. AdSense data handling is governed by Google's Privacy Policy.

GDPR and CCPA

Because we do not collect personal data, store user information, or process images on any server, most GDPR and CCPA obligations do not apply to us in the traditional sense — there is no data to access, correct, delete, or port. If you are a user in the European Economic Area or California and have questions about your rights with respect to the third-party services on this site (Google Analytics, Google AdSense), those requests should be directed to Google directly, as they are the data controller for those services.

Third-party links

This site may contain links to external websites. We are not responsible for the privacy practices or content of those sites. Clicking an external link means you are subject to that site's own privacy policy.

Children's privacy

heic2jpeg.app is not directed at children under 13. We do not knowingly collect any information from children. If you believe a child has provided personal information through this site, please contact us and we will take appropriate steps.

Changes to this policy

We may update this policy from time to time, for example if we add new third-party services or change how the tool works. Changes will be reflected by the "Last updated" date at the top of this page. Continued use of the site after a policy update constitutes acceptance of the revised terms.

Contact

If you have questions or concerns about this privacy policy, you can reach us via the contact information listed on the About page. We will respond to privacy-related inquiries within a reasonable timeframe.