Privacy policy

Last updated October 19, 2026

The short version: your files never leave your device. We can't see them, store them or share them, because they are never sent to us. If you buy Pro, we keep only what's needed to run your account: your email address, your name if Google provides it, and your subscription status.

Your files

When you use any tool on OneDropConvert, your browser downloads our conversion code along with the page. Your images and PDFs are then read, converted and saved entirely on your own device. File contents and file names are not sent to our servers or to anyone else, whether or not you have an account.

This isn't only a promise. Our website sends a security instruction (a Content Security Policy) that tells your browser to block the page from contacting any server other than ours and, only if you accept analytics cookies, Google Analytics. Our server has no endpoint that accepts files, and analytics never receive file names or contents.

Converted images are created from pixels only, so hidden metadata from the original, such as GPS location, camera model and dates, is not copied into them. When you merge or split PDFs, the pages are copied as they are into a new document; document properties such as the original title and author are not copied.

Remove background uses an AI model that runs in your browser. The model file (about 44 MB, or 88 MB on devices where it runs on the graphics card) is downloaded from our website the first time you use the tool and kept in your browser's storage so it doesn't need downloading again. Your photos are processed on your device and are never sent to us or to an AI service.

The free daily limit

Free use is limited to 10 conversions a day, counted on our server so it works the same in every browser and window. Before a file is converted, the page tells our server only how many conversions it wants to use, never the file, its name or its contents. We count them under an anonymous key made from your IP address and today's date with a secret one-way function: your IP address itself is not stored, and because the key changes every day, one day's count can't be linked to another. If you're signed in, the count is also kept with your account for that day. Counts are deleted after two days. The count resets at midnight UTC. Your browser also keeps a copy in local storage, used only if our server can't be reached.

Accounts (Pro only)

You only need an account for OneDropConvert Pro. When you sign in we store:

  • Your email address, and your name and Google account ID if you sign in with Google.
  • Your subscription: plan, status, renewal date and the ID Stripe uses for you as a customer.
  • Your Google Analytics ID, only if you accepted analytics cookies before checkout, so subscription statistics can be linked to your visit.
  • Sign-in records: a scrambled (hashed) copy of each sign-in session and sign-in link, and a scrambled copy of your IP address used only to limit how many sign-in emails can be requested. Links expire after 20 minutes and are deleted after 7 days; sessions expire after 30 days.

We don't record which tools you use or what you convert, and we don't sell or share your details for marketing.

You can delete your account at any time from the account page (after cancelling any active subscription). This removes your email address, name and sign-in records from our database. Stripe keeps payment records that the law requires for tax and accounting.

Services we use

  • Stripe processes payments. Your card details go directly to Stripe and never reach us. Stripe's own privacy policy applies to the payment.
  • Google handles "Continue with Google" if you choose it. Google tells us your email address, name and that the address is verified.
  • Brevo sends sign-in emails. It receives your email address to deliver them.
  • Hostinger hosts the website and the account database.
  • Google Analytics measures visits, only if you accept analytics cookies (see above).

Server logs

Like almost every website, our hosting provider keeps standard server logs when pages are requested: IP address, date and time, the page requested, browser type and the referring page. These logs are used to keep the site running and secure and are kept for a limited period.

Analytics (only with your consent)

We use Google Analytics 4 to understand how many people visit and which tools they use. It loads only after you click "Accept" on the cookie banner. If you decline or ignore the banner, no request is made to Google at all. You can change your choice anytime with "Cookie settings" in the footer.

When enabled, Google Analytics receives the pages you view, your approximate location and device type (from your IP address and browser), and a few custom events about how the site is used: a conversion finished, failed or was downloaded (with the tool, the formats, the number of files and whether you use the free or Pro plan), the daily free limit was reached, an upgrade button or checkout was opened, and you signed in, signed up, signed out or deleted your account. It never receives file names, file sizes, file contents, your email address or your name. Google Analytics sets cookies named _ga and _ga_<ID> (up to 2 years) to recognise repeat visits. Google processes this data under its own privacy policy. Google Analytics keeps this data for 14 months.

Subscription statistics. When a Pro subscription starts, renews, is cancelled, ends, fails to renew or is refunded, our server reports that event to Google Analytics with only the plan, the amount and an opaque transaction reference. If you accepted analytics cookies, the event is linked to your visit using the Google Analytics ID from your browser (saved with your account at checkout); if you didn't, it is sent with a random ID and only counts towards totals. Your email address, name and payment details are never sent to Google.

Cookies and browser storage

We don't use advertising cookies. Analytics cookies (_ga, _ga_<ID>) are only set if you accept them. Everything else is strictly needed for the site to work:

  • odc_session: keeps you signed in (only after you sign in; 30 days).
  • odc_signed_in: tells the page you're signed in, so it doesn't ask our server about Pro status for visitors who aren't (only after you sign in; 30 days).
  • odc_oauth: protects "Continue with Google" against forgery (10 minutes).
  • Local storage odc_quota_v1: a copy of today's free conversion count, used if our server can't be reached.
  • Cache storage odc-models-v1: the background-removal AI model, kept so it doesn't download again. You can clear it with your browser's site data.
  • Local storage odc_consent_v1: remembers whether you accepted or declined analytics cookies.

Stripe sets its own cookies on its checkout and billing pages to prevent fraud.

Advertising

The site does not show ads at the moment. If we introduce advertising in future, we will update this policy before doing so, and visitors in the EU and UK will be asked for consent before any advertising cookies are used. Ads will never have access to your files.

Children

OneDropConvert is a general-audience tool. Accounts and subscriptions are intended for adults. We do not knowingly collect personal information from children.

Your rights

You can see the details we hold on your account page, delete your account there, or contact us to request a copy or correction. If you're in the EU, UK or California you have further rights under GDPR, UK GDPR or CCPA, and we'll respond within the time those laws require.

Changes

If this policy changes, we'll update the date at the top of this page. If you have an account and the change is significant, we'll email you.

Contact

Questions about privacy: info@onedropconvert.com.