Privacy Policy

The short version

Our tools process your files in your own browser. Your files are never uploaded to our servers, and we never see or store them.

We measure how the site is used with our own statistics, which use no cookies and do not store your IP address. If you create an account or write to us, we keep only what we need to provide that service. With an account, we also keep for 90 days which tools you used, how many files and megabytes you converted and whether they failed (never your files or their names), and your visits to the pricing page. We do not sell your data.

Who is responsible for your data

The data controller is Lupo Rooms S.L., tax ID (CIF) B-26746925, Calle Ramon Mas 31, 1st floor, door 4, 08174 Sant Cugat del Vallès (Barcelona), Spain, registered in the Mercantile Registry of Barcelona. For anything related to your data, write to info@freeonlinefileconvert.com.

We have not appointed a Data Protection Officer because the law does not require one for our activity. Your requests are handled directly by the company.

Your files

When you use a tool, your file is read and converted with your device’s own memory and processor. It is not sent to us or to anyone else. When you close or reload the page, the file and the result disappear from memory.

We never record file names or file contents. Our statistics only note technical facts about a conversion, such as the number of files, their size, the output format and how long it took.

Usage statistics (without cookies)

To know which tools are useful and fix errors, we run our own statistics system, stored in a Cloudflare D1 database. It does not use cookies or any other identifier saved on your device, and it does not track you on other websites.

To count unique visitors, our server combines a secret value, the current date, your IP address and your browser’s user agent, and turns them into a short code with a one-way function (a hash). We store only that code, never your IP address. Because the date is part of the calculation, the code changes every day, so we cannot link your visits from one day to the next.

For each page view or tool action we store:

• country and region (derived from the connection; the IP address itself is not stored)
• device type, browser and operating system
• browser language and screen width, only if you accept analytics cookies
• the page visited, the referring website and any campaign tags (utm) in the link
• tool events: tool used, number of files, input and output size, processing time, format and error messages, without file names
• the date and time of the event

User accounts

You can use the tools without an account. If you choose to create one, you can sign in with Google or with a sign-in link we email to you (a “magic link”).

For your account we store your email address, your name, the date you signed up, your preferred language and whether you belong to the Family & Friends list. If you sign in with Google, Google shares your name, email address and profile picture with us; we use them only to identify you and show your account.

Signing in sets a session cookie that is strictly necessary to keep you logged in. You can find it in our Cookie Policy.

For security, we record your account activity: sign-ups, sign-ins and sign-outs (with the method used, the country, the device type and the browser, without storing your IP address) and changes to your profile. We use it to detect suspicious access and to help you when you contact us. It is deleted together with your account.

While you are signed in we also keep the history of the tools you use: which tool, when, whether the conversion finished or failed and, if it failed, the error code (for example, that the PDF had no text). If it finished, also how many files you converted and how many megabytes they took up in total. It never includes your files or their names. We also keep a running total of your conversions, files and megabytes. We also keep your visits to the pricing page: how far down you scrolled, how long you stayed and whether you clicked the buy button. And we keep the last tool you started, to remind you when you left something unfinished if you have agreed to receive our emails.

We use this to improve the tools, to email you when we fix a tool that failed for you, and to understand who is interested in Pro so we can offer it to them. Emails with offers only reach you if you have agreed to receive them. All of this is deleted after 90 days, or sooner if you delete your account; the running total of conversions, files and megabytes is kept while you have the account.

We never see or store your files, and nothing of this is recorded when you are not signed in: statistics for visitors stay anonymous.

Contact form and support tickets

When you write to us through the contact form, we ask for your name, your email address (required), the topic (a problem with a tool, partnerships or advertising, billing or Pro, a tool suggestion, data protection, or other) and your message. We store the ticket in our database and forward it by email to info@freeonlinefileconvert.com so we can answer you. We use it only to handle your request.

Commercial emails

We only send you news, tips, reminders or offers if you have expressly agreed to it by ticking a separate box, which is never pre-ticked and is never a condition for using the site or creating an account.

Every commercial email includes a link to unsubscribe in one click, and your email program can unsubscribe you with a single click of its own. You can also withdraw your consent at any time from your account or by writing to us. Emails that are needed for the service (sign-in links, replies to your tickets, receipts, a declined card, a plan that is ending) are not commercial and are not affected.

We keep a record of each email we send you (which email, in which language, when, whether it was delivered and whether you clicked the button in it) for 90 days, so we can tell whether our emails arrive and answer you if one did not.

Payments and invoices (Pro plan)

The Pro plan is not available yet. When it is, payments will be handled by Stripe on its own secure payment page: we will never see or store your full card details. We will receive from Stripe the information needed to manage your subscription (such as your email, the plan, the payment status and your country). If you buy time-limited unlimited access without an account, Stripe gives us your email, name, country and the payment status, which we use only to confirm the payment and issue the invoice.

Invoices are issued with our accounting software, Holded. To issue them we process your name or company name, tax ID if you provide one, address, country and the amounts paid.

Advertising

There is no advertising on the site today. In the future we may show ads through Google AdSense or other advertising networks to keep the tools free. Advertising cookies will only be used if you accept them in the cookie banner. If you refuse, you may see non-personalised ads, which do not use your data to build a profile. We use Google Consent Mode v2 so that Google respects your choice.

Why we process your data (legal basis) and how long we keep it

Each use of your data has its own legal basis under the General Data Protection Regulation (GDPR) and its own retention period:

• Usage statistics: our legitimate interest in understanding how the site is used, improving the tools and detecting errors (Art. 6.1.f GDPR). The data is minimal, does not include your IP address and cannot be linked across days. Kept for up to 24 months, then deleted.
• Delivering the website and protecting it from abuse (Cloudflare): legitimate interest in running a secure service (Art. 6.1.f GDPR). Cloudflare keeps technical logs for short periods according to its own policies.
• User account: performance of the contract you accept when you sign up (Art. 6.1.b GDPR). Kept while your account is open. If you delete it, we erase your data within 30 days.
• Contact form and tickets: your request and our legitimate interest in answering it (Art. 6.1.b and 6.1.f GDPR). Kept for 2 years after the ticket is closed, in case the same issue comes up again, then deleted.
• Commercial emails: your consent (Art. 6.1.a GDPR and Art. 21 of Spanish Law 34/2002, LSSI). Kept until you unsubscribe; we keep proof of your consent and of your withdrawal for as long as we may need to demonstrate it.
• Service emails and the record of what we sent: performance of the contract and our legitimate interest in a service whose emails actually arrive (Art. 6.1.b and 6.1.f GDPR). The record is kept for 90 days.
• Tool history, visits to the pricing page and the last tool you started, while signed in: our legitimate interest in improving the tools, telling you when we fix one that failed for you, helping you finish what you started and understanding interest in Pro so we can offer it (Art. 6.1.f GDPR). Kept for 90 days or until you delete your account; the running total of conversions, files and megabytes, while you have the account. You can object at any time by writing to info@freeonlinefileconvert.com. Emails with offers only reach you if you have given your consent.
• Payments and invoices: performance of the contract and our legal obligations in tax and accounting matters (Art. 6.1.b and 6.1.c GDPR). Invoices and accounting records are kept for 6 years, as required by Spanish commercial law.
• Optional cookies (preferences and advertising): your consent (Art. 6.1.a GDPR and Art. 22.2 LSSI). Your choice is stored for 12 months.

Who we share data with

We do not sell your data. We only share it with providers that help us run the service, under contracts that oblige them to protect it and use it only on our instructions:

• Cloudflare, Inc. (United States): hosting, content delivery network, statistics database and access control to our private admin area.
• Hostinger: domain name and email inbox (European Union).
• Resend (United States): sending our emails, both the ones the service needs (sign-in links, receipts, notices about your plan) and, if you agreed to them, the ones about new tools.
• Google (Google Ireland Ltd. and Google LLC): sign-in with Google and, in the future and only with your consent, advertising through Google AdSense.
• Stripe (Stripe Payments Europe Ltd. and Stripe, Inc.): payments for the Pro plan and for time-limited unlimited access.
• Holded Technologies S.L. (Spain): invoicing and accounting.
• Public authorities, courts or the tax office, only when the law requires it.

Transfers outside the European Union

Some providers (Cloudflare, Resend, Google and Stripe) are based in the United States or may process data there. Those transfers are protected by the EU–US Data Privacy Framework, where the provider is certified, and in any case by the Standard Contractual Clauses approved by the European Commission. You can ask us for more information about these safeguards.

Children

The tools can be used without giving us any personal data. To create an account, sign up for emails or contact us, you must be at least 14 years old, which is the age of consent for data processing in Spain. If you are younger, a parent or guardian must do it for you. If we learn that we hold data from a child under 14 without that consent, we will delete it.

Your rights

You can ask us at any time to access your data, correct it, delete it, restrict its processing, receive it in a portable format, or object to its processing. When processing is based on your consent, you can withdraw it at any time, without affecting what was done before. To exercise any of these rights, write to info@freeonlinefileconvert.com from the email address linked to your data, or explain how we can identify you. We will answer within one month.

Please note that our statistics do not store your IP address or any stable identifier, so we usually cannot find which records relate to you.

If you think we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the authority of the EU country where you live. We would appreciate the chance to sort it out with you first.

Security

Your files stay on your device. The data we do hold is stored with providers that use encryption in transit, and access to our admin area is protected by Cloudflare Access with verified sign-in. Only the people who run the service can access it.

Changes to this policy

If we change how we use your data, we will update this page and the date above. If the change is important and you have an account, we will also let you know by email before it takes effect.