Security
Here's what we actually do to keep this service safe — described honestly, not copied from a bigger company's compliance page.
How we protect the service
Real format verification
We check the actual bytes of every uploaded file — not just its name or extension — before converting it, so a file can't disguise itself as something it isn't.
No file retention
Uploaded files are processed only long enough to produce your converted download, then deleted immediately. Nothing is stored, backed up, or shared.
Abuse protection
IP addresses that abuse the service can be blocked instantly, and every upload is checked against a size limit before any conversion is attempted.
Encrypted admin access
The administrative panel is protected by a hashed password (never stored in plain text) and automatically locks out repeated failed login attempts.
Injection-safe database access
Every database query uses parameterized statements, so nothing in a filename or form field can be interpreted as part of a query.
Private by default
We don't sell or share your data, and don't use it for anything beyond running and securing this service — see our Privacy Policy for the full picture.
Our practices
Transparent policies
Our Privacy Policy and Terms of Service describe exactly what we do — not generic legal text about services we don't actually use.
Actively maintained
This is an actively developed service — security-relevant issues are fixed as they're found.
Responsible disclosure
Found a security issue? Please tell us via the Contact page before disclosing it publicly, so we can fix it first.