Privacy Policy
How HexaConvert handles your files and your data.
Last updated 5 September 2026
The short version
Every conversion on this site runs inside your own browser. The files you open are never transmitted to us, because there is nothing to transmit them to: the site is a set of static files with no backend, no upload endpoint and no storage. There are no accounts and no advertising.
We would like to use Google Analytics to count visits and see which tools get used, and we ask before we do. If you have not agreed, it is never loaded, no cookie is set, and Google is never told you were here. It never sees your files either way.
Your files
When you open a file, your browser reads it into memory on your device and processes it there, using the Canvas API, WebAssembly and WebGL. The result is produced on your device and saved by your browser when you download it.
We never receive the contents of your files, their names, or any information derived from them. Nothing about a conversion is logged, because no request about it is ever made.
Files are held in memory for as long as the page is open, and are discarded when you close or reload the tab. Nothing is written to disk unless you choose to download the result.
Analytics, and only if you agree
A banner asks on your first visit. Until you accept, the Google Analytics script is not requested, so no cookie is written and no request is made to Google at all. Rejecting is one click in the same place as accepting, and nothing on the site stops working if you do.
You can change your mind at any time with the link in the footer. Withdrawing consent deletes the analytics cookies from your browser as well as stopping any further reporting.
If you do accept, Google Analytics 4 records the pages you visit, the address you arrived from, and general facts about your device such as browser, operating system, screen size and approximate location derived from your IP address.
To recognise a returning browser it stores cookies on your device, named _ga and _ga_<id>. Google Analytics 4 does not log full IP addresses, and we have not enabled advertising features, so your visits here are not used to build an advertising profile.
It never receives your files or anything derived from them. Analytics reports a page view for a tool; it has no way of knowing what you converted.
Your choice is remembered in local storage rather than in a cookie, so declining does not itself require storing a cookie.
What is stored on your device
Your light or dark theme preference, kept in your browser's local storage so the site does not flash the wrong colours on your next visit. It never leaves your device.
Your answer to the cookie banner, so you are not asked on every visit.
The Google Analytics cookies described above, but only if you accepted them. Clearing your browser's site data removes all of it.
What our host can see
The site is delivered by Cloudflare Pages. Like any web host, Cloudflare receives the ordinary information that is part of making a web request, such as your IP address, your browser's user agent string and the address of the page you asked for. Cloudflare uses this to deliver the site and to protect it from abuse.
This is a property of how the web works rather than something the site collects or has access to. We do not read, store or analyse those logs, and the contents of your files are not part of them.
Third parties
Google Analytics is the only one, and it is contacted only if you accepted the banner. It is governed by Google's own privacy policy. If you declined, your browser contacts no third party at all while you use the site.
The tools themselves rely on large open source engines, including FFmpeg compiled to WebAssembly, Mozilla's pdf.js and SheetJS, and every one of them is served from this domain rather than from a third party content network. The same is true of the fonts. Nothing about your files reaches anyone.
Children
The site is not directed at children, and we do not knowingly collect personal information from them. We ask for no personal information from anyone: the only data gathered is the analytics described above, and it identifies a browser rather than a person.
Changes
If this policy changes, the date at the top of this page changes with it. Material changes will be described here rather than made quietly.
Contact
Questions about this policy can go to [email protected].



