Privacy Policy

Last updated: October 23, 2026

1. Who we are

JPG to PDF Converter Free (“we”, “us”, the “Site”) is a free online file-conversion website, and we are the data controller for the limited personal information described in this policy. It explains what we collect, why, which third parties are involved, and your rights. Questions? Contact us at contact@example.com.

The most important fact: conversion runs 100% in your own web browser. Your files are processed on your device and are never uploaded to, stored by, or viewed by us. Most of this policy therefore covers the small amount of ordinary website data described below.

2. Your files are never uploaded or collected

When you use the JPG to PDF or PDF to JPG converter, the images and PDF files you select stay on your device at all times. Our servers never receive them, so we cannot store, lose or leak them, and they are never used to train AI models. The result is created locally and downloaded straight to your device. This also means we cannot recover a file for you — please always keep your originals.

3. Information we collect

We collect as little as possible:

  • Account information. Accounts exist for site administration. We store a name (optional), an email address, and the password only as a one-way bcrypt hash — never the actual password. We also keep related security data (failed-login counters, lockouts, hashed reset tokens).
  • Usage and conversion statistics. Each conversion records only anonymous technical facts: which tool was used, how many files were converted, whether they were merged, and when. No file names or contents are ever recorded. Guest conversions carry no identity; a statistic is linked to an account only if it happened while logged in.
  • Automatically collected technical data. Like every website, our hosting and security systems process your IP address, browser and device type, referring page, and request times in standard server logs. We also rate-limit requests by IP address to defend against abuse; these signals expire automatically after a short time.

4. How we use information

  • To operate accounts and the administration dashboard;
  • To keep the Site secure — rate limiting, account lockouts and abuse prevention;
  • To understand aggregate usage (for example, conversions per day) and improve the Service;
  • To measure traffic and display advertising, where those features are enabled in the Site settings.

We do not sell your personal information, and we share it only with the service providers described in this policy, or when required by law.

5. Advertising — Google AdSense and cookies

This Site is free to use and is supported by advertising served through Google AdSense. Google, as a third-party vendor, uses cookies to serve ads on this Site. Google's use of the DoubleClick / DART cookie enables Google and its partners to serve ads to you based on your prior visits to this Site and to other sites on the internet. Other third-party vendors and ad networks in the AdSense programme may also use cookies and similar technologies to provide advertisements and measure how they perform. The data these partners collect is governed by their own privacy policies; we do not receive the raw advertising data Google collects about you.

Personalised advertising. Where personalised ads are enabled, Google may use the advertising cookie to build an advertising profile so the ads you see are more relevant to you. You are in control of this:

6. Cookies

A cookie is a small text file stored on your device so a site can remember information between visits. This Site uses three kinds:

  • Essential. A first-party session cookie (jpgtopdf_token, httpOnly, 7 days) that keeps account holders logged in.
  • Analytics. Google Analytics cookies that measure anonymous, aggregate usage — only if analytics is enabled in the Site settings (see section 7).
  • Advertising. Google AdSense cookies, described in section 5, used to serve, personalise and measure ads — only if advertising is enabled in the Site settings.

You can view, block and delete cookies at any time in your browser settings, or set your browser to refuse cookies entirely. If you block cookies, the converters will still work — conversion happens locally — but login sessions will not persist. Full details are on our Cookie Policy page.

7. Google Analytics

Where enabled in the Site settings, we use Google Analytics to understand anonymous, aggregate usage statistics. It sets cookies, and you can opt out with Google's Analytics opt-out browser add-on.

8. Third parties we work with

A small number of service providers process data on our behalf:

  • Google — AdSense advertising and Google Analytics measurement, only when those features are enabled;
  • Cloudflare — hosting and content delivery;
  • Turso — database hosting for accounts, settings and anonymous statistics.

Only enabled providers process any data, and none ever receive your files — those never leave your device.

9. Legal bases for processing (GDPR / UK GDPR)

Where European or UK data-protection law applies, we process the limited data described above on these bases: performance of a contract (operating your account), legitimate interests (site security, abuse prevention, aggregate usage), consent (for personalised advertising and analytics cookies, which you can withdraw at any time via sections 5–7), and legal obligations where they arise.

10. Your rights

If you are in the EEA or the UK, you have the right to access the personal information we hold about you; have it corrected or erased; restrict or object to its processing; receive it in a portable format; and withdraw consent at any time, without affecting past processing. You may also complain to your local data-protection supervisory authority.

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information is collected and how it is used; to request its deletion; to opt out of the “sale” or “sharing” of personal information for cross-context behavioural advertising — use the opt-outs linked in section 5; we ourselves never sell personal information for money; and to not be discriminated against for exercising any of these rights.

To exercise any right, email contact@example.com and we will respond within the period the applicable law requires.

11. Data retention

Account data is kept while the account is active and is deleted on request. Anonymous usage statistics are kept only for aggregate reporting. Security and rate-limit records expire automatically after a short time, password-reset tokens are single-use and expire within one hour, and server logs are rotated regularly.

12. Data security

We protect the information we do hold with concrete technical measures: passwords hashed with bcrypt, session cookies that are httpOnly and sent only over HTTPS in production, per-IP and per-account rate limiting with temporary account lockouts, strict input validation on every form and API, and HTTPS encryption for all traffic. No method of transmission or storage is completely secure, but the strongest protection is architectural: your files are never sent to us at all.

13. Children's privacy

This Site is not directed to children under 13, and we do not knowingly collect personal information from them. In the EEA, where the age of digital consent can be up to 16, younger users should use the Site with a parent or guardian. If you believe a child has registered an account here, contact us and we will delete it.

14. Do Not Track

Some browsers send a “Do Not Track” signal. There is currently no agreed industry standard for responding to these signals, so the Site does not respond to them specifically; the cookie controls and opt-outs above remain available.

15. International transfers

Our hosting and service providers may process data in countries other than yours (for example, the United States and the EU). Where GDPR/UK GDPR applies, such transfers rely on the safeguards those providers offer, such as adequacy decisions or standard contractual clauses.

16. Third-party links

The Site and its blog may link to third-party websites. Those sites are outside our control, and their own privacy policies govern how they handle your information.

17. Changes to this policy

We may update this policy from time to time. The current version will always be posted on this page with its last-updated date, and continuing to use the Site after a change means you accept the updated policy.

18. Contact

For any privacy question, request or complaint, email contact@example.com and we will get back to you.