ConvertPrivacy Policy
How Convertly handles your files and account information.
Last updated:
About this policy
This policy describes the current browser-based Convertly service at convert-to.live. File conversion and account services handle different kinds of information.
Your conversion files
The conversion tools process files in your browser using code downloaded from this website. Our conversion code does not upload the files you select, their contents, or conversion results to our server. There is no server-side conversion queue or account file library. Results remain available in the current browser session until you remove them or leave the page; files you download remain on your device until you delete them.
Closing the page does not delete your original files or downloaded results. Browser memory and download behavior are controlled by your device and browser.
Importing a file from a URL or cloud service
If you enter a public direct file URL, your browser requests the file from that source. The source receives your connection details, including your IP address, and the requested URL. Convertly's import request omits credentials and the referrer. Google Drive, Dropbox and OneDrive buttons also offer links to those services and download-then-choose guidance; they are not authenticated cloud-drive pickers. External services apply their own privacy policies.
Do not submit private links, access tokens, passwords, or confidential information in a public file URL.
Account information
If you register, our account service stores your name, email address, a password hash, an account identifier and creation time. It does not store your password in readable form. Session data supports sign-in and request protection. A keyed hash derived from the connecting IP address, action and time window helps limit repeated account requests.
Google sign-in and recovery email are currently unavailable until configured. If enabled later, Google sign-in will provide an identity identifier, verified email address and profile name; Google handles its own authentication. Password recovery will use your email address and a short-lived reset link. This policy must be reviewed before these features launch.
Contact messages
When you use our contact form, we collect your name, email address, selected topic and message to handle your enquiry and prevent abuse. Messages are stored in a private server inbox, separate from conversion files; they are not posted publicly. A keyed hash derived from the connection IP and time window is used for rate limiting. Messages expire after 90 days and expired records are removed during later submissions. Infrastructure backups may follow a separate retention schedule. You can request earlier removal by contacting [email protected]. No file attachments are accepted.
Optional Google Analytics
With your permission, Google Analytics 4 measures visits to public Convertly pages. We block the Google tag until you accept analytics and do not send analytics requests if you reject it on a fresh visit. It can process browser/device information, approximate location derived from your connection, page titles, public page paths, timestamps and cookie identifiers to help us understand traffic. Google processes data on its infrastructure, which may be outside your country. Read Google's Privacy Policy and Google's partner-site data information.
We disable enhanced measurement in this stream and do not intentionally send your files, filenames, account details, contact form values, URL query parameters or fragments to Analytics. Advertising personalization and Google signals are disabled in our tag configuration. Account and password recovery pages do not contain this analytics integration. You can reject or withdraw optional analytics using Analytics preferences in the footer. Your preference is stored on this browser for 180 days; if browser storage is unavailable, your choice lasts for the current page only. Existing analytics data is not retroactively removed by withdrawing consent.
Google Analytics retention follows the property's configured settings. Contact us for requests about collected information. Search Console separately reports aggregate Google Search performance and does not require a visitor tracking script on this website.
Advertising and Google AdSense
Google AdSense is not currently installed on this website. If Google ads are enabled in the future, third-party vendors including Google may use cookies or similar technologies, web beacons, IP addresses or other identifiers to deliver and measure ads. Advertising cookies can enable Google and its partners to personalize ads based on visits to this and other websites.
You can manage personalized advertising through Google My Ad Center and learn how Google uses information from partner websites. Other participating vendors may offer opt-outs through YourAdChoices. These links do not imply that ads or ad tracking are currently active here. Before launching ads, we will update our vendor disclosures and implement applicable consent and privacy controls.
Hosting and security
Cloudways hosts the website and account service. Cloudflare provides DNS, proxy and security services. Requests for website pages and account features pass through this infrastructure. These services may process IP addresses, request URLs, browser information, timestamps and security events for delivery, troubleshooting and protection. A statement about local file conversion does not mean that visiting the site is anonymous.
We use HTTPS and restrict access to private account storage. No system can guarantee complete security. Avoid processing highly sensitive files on shared or untrusted devices.
Cookies and tracking
The application uses an essential session cookie for accounts and security. The current application includes no advertising scripts and does not sell account data. Optional Google Analytics is described below. Infrastructure security cookies may be used. See the Cookie Policy for details.
Retention
Conversion files are not retained by our account database. Account records remain stored until removed by the operator; automatic account expiry and self-service account deletion are not currently implemented. Account rate-limit entries have a 15-minute expiry and are cleaned up during later account requests. If recovery is enabled, reset links expire after 30 minutes; expired records are cleaned up during later recovery requests. Infrastructure logs and backups follow provider and operator settings; retention periods can vary by log type and operational need. For details about retention of your account information, contact us using the address below.
Your choices and requests
You can use conversion tools without creating an account, log out, and clear site cookies through your browser. Depending on your location and applicable law, you may have rights to access, correct, obtain or delete personal information, or to object to certain uses. There is currently no automated account export or deletion feature. Identity verification may be needed before an account request can be fulfilled.
Contact and updates
Convertly is operated by Blueapps LLC. For privacy questions or requests about your personal information, email [email protected]. We will revise this page when the service or its data handling changes and update the date above.