Convertere.io

Last updated: October 9, 2026

Scope of This Privacy Policy

This Privacy Policy explains how Convertere.io ("Convertere," "we," "us," or "our") collects, uses, and shares information when you use our website and file-conversion services (the "Service"), whether you're browsing, converting a file without an account, or signed in as a registered user or organization member. Convertere.io is the data controller for the personal information described here.

Data Minimisation Commitment

Convertere is built around converting your files, not collecting them. Uploaded files and results are deleted automatically within 24 hours.

1. Information We Collect and How We Use It

1.1 Information You Provide

Account information: if you create an account, we collect your name, email address, and password (or, if you sign in with Google, the basic profile information Google shares with us).
Uploaded files: the documents, images, audio, video, or archives you upload for conversion — see "Data Minimisation Commitment" above for how long these are kept.
Payment information: if you buy credits or a subscription, your payment and billing details (such as card details, billing address and email) are collected and processed directly by Stripe. Purchases are sold through Link: Stripe, via Link, is the merchant of record and the seller, and handles payment, tax and receipts under its own privacy policy. Convertere never sees or stores your full card number; we receive only what we need to credit your account, such as the purchase, amount, country and a payment reference.
Communications: messages you send us through the Contact page or support@convertere.io, including any information you choose to include.

1.2 Information From Third Parties

If you sign in using Google OAuth (via our authentication provider, Better Auth), we receive the basic profile information (name, email address, profile picture) Google shares as part of that sign-in.

1.3 Information We Collect Automatically

Usage and log data: pages visited, conversion actions taken, timestamps, browser type, and referring URLs.
Device and connection information: IP address (used to infer an approximate, non-precise location for language/region defaults), device type, and operating system.
Cookies and similar technologies: see "Cookies and Tracking Technologies" below.

1.4 How We Use This Information

We use the information above to:

Provide, operate, and maintain the Service, including performing the conversions you request
Create and manage your account and organization membership
Credit your account for purchases and manage subscriptions (the payment itself is processed by Stripe)
Respond to support requests and other communications
Monitor, secure, and improve the Service, including diagnosing technical issues
Detect and prevent fraud, abuse, and violations of our terms
Comply with legal obligations

We do not sell your personal information. We share information only in the following circumstances:

Service providers: with vendors who help us operate the Service under contract:
- Resend — sends transactional email (sign-in codes, password resets, and account notices).
- Stripe (Link) — our payment processor. Stripe, via Link, is the merchant of record for purchases: it processes payments and subscriptions, calculates and collects sales tax, sends receipts and handles payment support. See the Stripe Privacy Policy and Link Privacy Policy.
- Google — Google OAuth sign-in, if you choose it.
- Hosting providers — our compute and database run in Germany. The conversion workers and the database run on Hetzner in Falkenstein. The web application runs on Hetzner and, when it needs more capacity, on Google Cloud, both in Germany. Server logs are kept on the servers' disks in Germany.
- Cloudfleet — the managed Kubernetes provider for our servers.
- Cloudflare — object storage (Cloudflare R2) for uploaded files, results and database backups, and content delivery for www.convertere.io. Storage is in Cloudflare's default location and is not limited to the EU.
Legal reasons: if required to comply with a law, regulation, legal process, or valid governmental request, or to protect the rights, property, or safety of Convertere, our users, or the public.
Business transfers: if Convertere is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy's protections.
With your consent: in any other case, only with your explicit consent.

Uploaded files are processed only by the systems that run your conversion: our web application, our conversion workers and our object storage, on the providers listed above. Cloudflare stores files for the conversion and delivers www.convertere.io. Files in storage are deleted automatically within 24 hours.

3. Analytics

We do not run analytics on the website. We do not use an analytics tool to measure page views, referrers, or devices.

4. Cookies and Tracking Technologies

This list is everything the site stores in your browser.

Cookies

conversion_visitor_id: A random ID, set on your first visit. It keeps your free conversions and a list of your recent conversions (the files themselves are deleted within 24 hours) linked to your browser, and lets us apply the free allowance. Scripts on the page cannot read it. Set on your first visit; kept 30 days.
Next-Locale: Remembers the language you chose. Set on your first visit; kept until you close your browser.
__Secure-better-auth.session_token: Keeps you signed in. Managed by our authentication library, Better Auth. Set after you sign in; kept 30 days.
sidebar_state: Remembers whether the dashboard sidebar is open. A preference. Set after you use it; kept 7 days.
sidebar_width: Remembers the width of the dashboard sidebar. A preference. Set after you use it; kept 7 days.

Local storage

cookie_notice: Remembers that you closed the cookie notice, and which version of the notice you saw. We show the notice again when we change what we use. Set after you use it; kept until you clear your browser data.
cookie_notice_at: When you closed the cookie notice. Set after you use it; kept until you clear your browser data.
theme: Remembers light or dark. A preference. Set after you use it; kept until you clear your browser data.
convertere.lastUsedAuthMethod: Stores only the name of the sign-in method you last used, to show it on the sign-in page. Set after you sign in; kept until you clear your browser data.

IP address. We store a hashed form of your IP address, kept to enforce the free allowance and prevent abuse, which we treat as personal data.

You can review the cookie notice at any time with Cookie notice in the site footer, and control or delete cookies through your browser settings.

5. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

Access — request a copy of the personal information we hold about you
Correction — ask us to correct inaccurate or incomplete information
Deletion — ask us to delete your account and associated personal information
Objection or restriction — object to, or ask us to restrict, certain processing
Portability — request your data in a portable, machine-readable format
Withdraw consent — where processing is based on consent, withdraw it at any time

You can exercise most of these rights directly from your account settings, or by emailing support@convertere.io. We'll respond within the timeframe required by applicable law.

Residents of California, Nevada, and other jurisdictions with specific privacy statutes have equivalent rights under those laws; Convertere does not sell personal information as defined by any of them.

Users in the European Economic Area, the United Kingdom, and Switzerland have the rights described above under the GDPR and equivalent UK/Swiss law, including the right to lodge a complaint with your local supervisory authority.

6. Data Retention and Security

Uploaded files and results: Uploaded files and results are deleted automatically within 24 hours.
File names and conversion records: the name of each file you convert and a record of the conversion are stored in our database.
Database backups: our database is backed up daily to Cloudflare R2, and backups are kept for 14 days.
Account data: retained for as long as your account is active, and deleted within 30 days of account closure, unless we're required to retain it longer for legal, tax, or accounting reasons.
Billing records: retained as required by applicable tax and accounting law.
Logs: our servers write application logs and web-server access logs, which include your IP address and the page you requested, for security and diagnostics.

We encrypt data in transit between your browser and our services (TLS). No method of transmission or storage is 100% secure, but we work to protect your information and will notify affected users of any confirmed data breach as required by applicable law.

7. Children's Privacy

The Service is not directed at, and is not intended for use by, children under 13 (or the minimum age required by your local law). We do not knowingly collect personal information from children. If we learn that we've collected personal information from a child without appropriate consent, we will delete it promptly.

8. International Data Transfers

Convertere's infrastructure (hosting, databases, and conversion processing) may be located in different countries than the one you're in. Where we transfer personal information internationally, we rely on appropriate safeguards, such as standard contractual clauses, to protect it consistently with this Policy.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. If we make material changes, we'll notify you by email or through a notice on the Service before the change takes effect. We encourage you to review this page periodically.

10. Contact Us

If you have questions about this Privacy Policy or want to exercise any of the rights described above, contact us at:

Email: support@convertere.io

Privacy Policy