Your files never leave your device
Most online converters say "we'll delete your file in 24 hours." Converter.Plus is built so we never receive it in the first place. Here is exactly how that works — and how you can verify it yourself in 30 seconds.
Converter.Plus
Privacy by architecture
- ✓ Files never leave your browser tab
- ✓ No upload, no server processing, no temporary copy
- ✓ Works offline after the first page load
- ✓ Verifiable in DevTools — Network tab stays empty
- ✓ Nothing for us to leak, subpoena, or sell
Typical online converter
"We delete your file in 24 hours"
- ✗ Your file is uploaded to a remote server
- ✗ Stored on disk, processed, copied across regions
- ✗ Subject to breach, subpoena, or insider access
- ✗ You have to trust the deletion promise
- ✗ Often used to train models or sold as data
How client-side conversion actually works
Step 1
The page loads, just once
Your browser downloads our HTML, CSS and a small JavaScript bundle that includes the conversion engines (WebAssembly modules for HEIC, JXL; the Canvas API for JPG/PNG/WebP/AVIF).
Step 2
You drop a file
The file is read from your disk into your browser's memory using the standard FileReader / File API. It stays on your device. No fetch() or XMLHttpRequest is ever made with your file's contents.
Step 3
Conversion runs locally
Your CPU does the work. The output blob is created in memory and offered to you as a download via a local blob: URL. We never see the input or the output.
Verify it yourself in 30 seconds
- Open developer tools (press F12 or Cmd+Option+I).
- Switch to the Network tab and click the clear button.
- Drop a file onto any converter and click Convert.
- Watch the network panel. Your file's bytes never appear in any request.
- Bonus: turn off your Wi-Fi after the page has loaded — the converter still works.
Why "we delete your file in 24 hours" isn't enough
The standard pitch from server-based converters — including the largest one in the category — is some variation of "files are encrypted in transit, processed on our servers, and automatically deleted after 24 hours." That sounds reasonable, but it asks you to trust a long chain of things you can't observe:
- That the file is genuinely encrypted end-to-end (it usually isn't — it's only encrypted in transit, then decrypted server-side).
- That every employee with infrastructure access behaves correctly during that 24-hour window.
- That the cloud region storing your file isn't subject to a subpoena, breach, or backup that outlives the deletion clock.
- That the deletion job actually runs, on every replica, in every region.
- That metadata (filenames, sizes, IPs, hashes) isn't retained, sold, or used to train models.
Privacy by architecture removes every item on that list. Your file never reaches a server we control, so there is nothing for us to mishandle, retain, leak, or be compelled to hand over. The promise isn't a policy — it's a property of how the software is built.
Honest exceptions
CAD drawings (DWG, DXF)
AutoCAD's binary formats are not currently convertible in the browser — there is no production-grade in-browser engine. Those converter pages run server-side and clearly display an amber "server-side conversion" badge instead of the green privacy badge, so you are never confused about which mode you are in. We will move CAD to client-side as soon as the technology supports it.
If a converter page shows the green privacy badge, your file is not uploaded — full stop.
What this gives you
Use it for sensitive files
Personal photos, medical scans, ID documents, NDA-covered drafts — none of it touches our infrastructure.
No accounts, no file history
No sign-up, no upload history, no retention timer. We use anonymous page-view analytics to count visits — never your file contents, names, or sizes.
Faster, too
Without an upload-download round trip, conversion starts the instant you drop a file — even for big batches.
Frequently asked questions
How can I verify nothing is uploaded?
Open your browser's developer tools (F12 or Cmd+Option+I), switch to the Network tab, then convert a file. You will see zero network requests carrying your file's bytes. The converter is just static HTML, CSS, and JavaScript downloaded once when the page loads.
Why is this safer than 'we delete your file in 24 hours'?
A 24-hour deletion promise still requires you to trust the operator, their employees, their cloud provider, and any subpoena or breach during that 24-hour window. Privacy-by-architecture removes that trust requirement entirely — your file physically cannot be exposed by us because it never reaches us.
Does this work offline?
Yes. After the page loads once, the converter continues to work even if you disconnect from the internet. That is the clearest possible proof there is no server in the loop.
Are there exceptions?
Yes — and we are explicit about them. CAD conversions (DWG/DXF) currently require server-side processing because no in-browser engine exists yet. Those pages display an amber 'server-side conversion' badge instead of the green privacy badge so you always know which mode you are in.
Do you collect any data at all?
We use anonymous page-view analytics (which page was visited, browser type, country) to understand which converters are used most. We never see, log, or transmit your file contents, file names, or file sizes. You can verify this in DevTools → Network. We do not require accounts and we do not retain a history of your conversions.