Your files and your choices.

Updated October 19, 2026. This notice covers the public, free ConvertLayer tools.

Files used for conversion

We receive the files and options you submit, process them on the server and return the results to your browser. Direct tools do not save an account history. Temporary work folders are removed when the request ends; source files and results may stay in this tab’s memory while you switch tools. Clear the workspace, refresh or close the tab to remove them. They are not saved in browser storage or an account. Local document tools use text extraction, OCR and source-based algorithms without sending document text to a generative AI provider.

Optional AI generation

Optional AI summaries and document questions are available when a provider and shared usage controls are configured. The document workspace identifies the provider and model and requires your confirmation before sending extracted text and your question. Source page numbers are included; the original file is not uploaded to the model provider by this integration. For the current Alibaba Cloud Bailian integration, extracted text is processed through its Beijing service endpoint. We do not create provider-side conversations or upload files to its storage. Provider retention policies still apply; this does not guarantee that the provider keeps no operational logs.

For free AI limits, the server stores daily keyed hashes of network addresses, request counts and budget reservations in Redis for up to three days. It does not store document text, questions or original network addresses in these quota records. Users on a shared network may share an allowance. The hosting platform may separately retain technical logs.

Hosting and security logs

The hosting platform, Vercel, may process technical request information such as IP address, URL, user agent and errors for delivery, security and operations. Conversion error diagnostics may include filenames or error messages; avoid sensitive filenames. Temporary file cleanup does not mean all hosting logs are immediately erased.

Optional first-party usage analytics

We offer optional usage analytics to improve the free tools. It starts only after you choose Allow analytics. No thanks leaves it off; Do Not Track and Global Privacy Control also keep it off. Use Analytics preferences in the footer to change your choice. Our detailed tool analytics use random browser IDs, without an advertising ID or device fingerprint.

If allowed, your browser stores a random identifier for up to 30 days and a per-tab session that renews after 30 minutes without interaction. Your preference lasts up to 180 days. We measure known page paths, bounded campaign labels, viewport categories, coarse country codes where supplied by the host, foreground active time, scroll milestones, file count and size categories, tool outcomes, download actions and on-site tutorial playback. We do not collect filenames, file contents, recognized text, AI questions or answers, passwords, clipboard contents, raw search queries or full referring URLs through analytics.

The server hashes these random identifiers with a private key and the calendar date. Summaries and approximate daily visitor counts expire after 35 days; hashed session and event-deduplication state expires after 48 hours. There is no cross-day visitor profile in this store. Referrals are reduced to broad channels and registered campaign names; unknown campaign text is discarded. Reports use Asia/Shanghai calendar days and cover consenting visitors only. Declining or withdrawing consent clears the random browser and session identifiers and pending events; already aggregated counters cannot identify you and are not reversed.

Separately, aggregate server operation counters record request outcomes, safe error categories and duration without browser IDs or document data. They support reliability monitoring even when optional visitor analytics is off. Vercel and the Redis hosting provider process the technical requests required to deliver and store this data; their operational logs have separate policies. A download click does not prove that a file was saved, and on-site video analytics do not provide external social-platform metrics.

Optional Vercel Web Analytics

The same Allow analytics choice also enables Vercel Web Analytics on the production site. It provides a separate dashboard for visits, page views, referring sites, countries, browsers and devices. Its script is not loaded before consent. No thanks, Do Not Track and Global Privacy Control keep it off; withdrawing consent blocks subsequent events, although an already loaded script remains until the page is reloaded. We send only known public page URLs, removing query strings and fragments, and exclude analytics QA pages. External referrers with query strings, fragments or credentials are excluded. Vercel may process other referring URLs and technical request metadata to provide its cookie-free statistics. Its visitor definitions, reporting timezone and retention follow Vercel’s service and may differ from our private daily reports. Detailed conversion events stay in our own reporting system. See Vercel Web Analytics privacy documentation.

Advertising and cookies

Google AdSense integration is available but advertising loads only when configured. If enabled, third-party vendors, including Google, may use cookies to serve ads based on visits to this or other websites. Google's advertising cookies allow it and its partners to personalize ads. Consent settings are presented through a Google-certified consent platform where configured; if the required consent signal is missing or rejected, our ad units do not request an ad.

You can manage personalized advertising at Google My Ad Center or opt out of participating vendors at YourAdChoices. Google explains partner-site processing in its partner sites notice. Browser cookie controls also apply. File contents and recognized text are not supplied as advertising parameters by our integration.

Accounts and payments

Registration, billing, team workspaces and paid AI features are not offered in the current public launch. A future release that enables them will need an updated privacy notice.

Questions

See the help page for processing and download information. The operator's legal identity and privacy contact must be published before commercial advertising is enabled.