Privacy policy,
short because there's little to say.
Your photos are never uploaded. Not "deleted quickly" — never received. Everything else on this page is the small print about what that leaves: what your browser stores on your own device, what any web host necessarily sees, and what changes on the day this site starts serving ads.
The part that matters
We never receive your photos, so we could not hand them over if asked.
The converter runs entirely inside your browser. Your files are read from disk into the page, decoded and re-encoded on your own machine, and written back to your downloads folder. They do not travel to us, because there is no "us" on the other end of the wire — no server, no bucket, no queue, no retention window to promise you.
Don't take that on faith. Press F12, open the Network tab and
convert a photo: nothing appears. Or turn off your Wi-Fi and convert one anyway
— it works, which it could not do if the file had to be uploaded. The
longer version of that test
works on any converter, including this one.
What we don't do
- No accounts. There is nothing to sign up for, so there is no name, email address or password here to lose.
- No analytics, at the time of writing. No page-view counter, no session recorder, no heatmaps. Nobody is watching you use this.
- No tracking scripts. No pixels, no tag manager, no social buttons.
- No webfonts. That one is deliberate. A hosted font is a request to a font CDN on every page load, which would tell a third party you were here — so the site uses the fonts already on your device instead.
- No copies of your files. Not for a minute, not for 48 hours. See above: they never arrive.
What is stored on your device
The site uses your browser's localStorage to remember two things.
Both stay on your device, are readable only by this site, and are never
transmitted anywhere:
| Key | What it holds | Why |
|---|---|---|
| safelight.settings.v1 | Your chosen output format, quality and resize setting. | So the converter opens the way you left it. |
| safelight.room | Whether you picked the light or dark scheme. | So your choice survives a page change. |
Neither contains anything identifying: no ID, no fingerprint, no file names, no history of what you converted. Clearing this site's data in your browser removes them both, and the site works fine without them.
What our host sees
The site is served by Cloudflare Pages. Like any web host, Cloudflare necessarily processes the connection that delivers the page to you — which includes your IP address and standard request logs. This is true of every website you have ever visited, and pretending otherwise would be exactly the kind of dishonesty this site exists to complain about. What is not in those logs is your photos, because your photos are never part of any request.
Cloudflare's handling of that data is governed by Cloudflare's privacy policy.
Advertising
When ads are switched on
This site is intended to be paid for by ads, served by Google AdSense. When that is switched on, the honest description is this:
- Google will set cookies and/or read device identifiers in order to serve and measure ads, and may use them to personalise the ads you see.
- Google is a third party receiving data about you — at minimum your IP address and the URL of the page you are on — directly from your browser. That data goes to Google, not through us.
- Your photos are still not part of any of this, and this is not a promise about our conduct. It is structural: the files are read from disk into the page and never enter the page's network layer at all, so there is nothing about them for an ad script, or anyone else, to receive.
- Under the GDPR and the ePrivacy Directive, visitors in the EU and UK must be shown a consent notice and given a choice before such cookies are set or identifiers read. Google also requires publishers serving EEA and UK traffic to use a certified Consent Management Platform.
This page will be updated on the day it happens, and the "Last updated" date will change with it. Until then, the paragraph in the box above is the current state of affairs and it is meant literally.
Your rights, and how we'd handle a request
The GDPR and similar laws give you rights over personal data held about you — access, correction, erasure, objection. We are not claiming these rights don't apply here; we're telling you what we hold, so you can judge for yourself what there is to exercise them against. We hold no accounts, no photos, and no analytics data. The site's own storage is on your device and under your control: clearing site data erases it, without asking us.
Where a third party does hold data about your visit — our host today, and Google when ads are switched on — those rights are exercised against that company, under the policies linked above, and their published processes are the route to it.
Children
The site collects nothing from anybody, of any age. There is no age gate because there is nothing to gate.
Changes to this policy
If what the site does changes, this page changes first or at the same time, never after. The "Last updated" date is how you tell. The one change already scheduled is the advertising section above, which is why it is written out in advance rather than sprung on you later.
Contact
Contact details for privacy questions are to be added here.
Last updated: 15 July 2026
The policy is the product
Everything above is a description of how the converter is built, not a promise about how we behave. That's the difference, and it's the whole point of the thing.