Privacy Policy

Scope

This policy explains the data handling implemented by the ForgeConvert website at forgeconvert.com. It applies to the public website and image converter. It does not describe practices of external websites that may be linked from ForgeConvert.

Image uploads and conversion

Image conversion takes place on the ForgeConvert server. Uploaded files are read into server memory so the selected decoder and encoder can process them. ForgeConvert does not claim that conversion happens entirely in your browser.

Normal converted files are returned directly from server memory. When a converted output is larger than 8 MB, the current implementation may write the output and a small download manifest to the server operating system’s temporary directory so the browser can retrieve it in chunks.

• Temporary download identifiers are random and must match a strict format.
• A temporary chunked download becomes invalid ten minutes after it is created.
• Expired temporary files are removed when the chunked-download service performs cleanup. Because cleanup is activity-driven, this policy does not promise deletion at an exact second.
• ForgeConvert does not provide permanent user file storage or a public gallery.

Browser storage

When a user selects files on the homepage and continues to a dedicated conversion route, ForgeConvert uses the browser’s IndexedDB storage to transfer that selection between pages. The application reads and deletes the pending record when the conversion page opens. If navigation is interrupted, the browser may retain that local site data until it is used, cleared by the user, or removed by the browser.

Request and rate-limit data

The conversion endpoint reads the requesting IP address supplied by the hosting path and uses it as an in-memory key for a short request-counting window. The application code does not write this rate-limit state to a database. Hosting infrastructure may independently process ordinary network and security logs; its retention is not defined by the ForgeConvert application code.

File validation and output metadata

ForgeConvert checks file size, filename extension, reported MIME type, and file signature before conversion. SVG input is additionally screened for active or external content. Normal converted outputs strip source metadata under the current encoder policy. Users should still inspect downloaded files before sharing them.

Cookies, analytics, and advertising

ForgeConvert uses Umami Cloud for privacy-focused website analytics. The tracker is loaded globally from cloud.umami.is, uses no cookies, is restricted to the ForgeConvert domain, excludes URL search parameters, and is configured to respect the browser’s Do Not Track setting. ForgeConvert does not use advertising, remarketing, or advertising-personalization technology.

Analytics data

Umami records aggregate usage information such as page views, referrer URLs, browser, operating system, device type, and approximate country. Umami states that analytics data is anonymized, that it does not store personally identifiable information, and that the IP address used to derive location and an anonymous session hash is not stored. ForgeConvert does not send uploaded image contents, filenames, form contents, email addresses, or conversion outputs to Umami.

Analytics is processed by Umami Cloud, a service operated separately from ForgeConvert. Its service and retention practices are governed by Umami’s applicable terms and privacy materials. Browser extensions and Do Not Track settings may prevent analytics requests.

Third parties and external links

ForgeConvert relies on hosting and network infrastructure to deliver the website and on Umami Cloud for aggregate analytics. Uploaded images are not sent to Umami. External resources linked from educational pages operate under their own policies.

Your choices

• Do not upload an image if you are not authorized to process it.
• Remove sensitive metadata before upload when the source itself must not contain it.
• Clear ForgeConvert site data in your browser to remove any interrupted pending-file record.
• Avoid using the service for images whose confidentiality requirements prohibit server-side processing.

Contact

Privacy questions and requests can be sent to contact@forgeconvert.com. Do not attach confidential source images or credentials.

Changes

This policy may be revised when the service’s actual data handling changes. The last-updated date will identify the current published version.