Privacy policy

  • Home
  • Privacy policy

Privacy Policy — Image Convert

Last updated: 2026-05-04

Image Convert is built around one simple principle: your images are yours. This extension performs all image conversion entirely on your device. Nothing is uploaded, nothing is tracked, nothing is shared.

1. Data We Collect

None.

Image Convert does not collect, store, transmit, or sell any personal information, image data, or usage data. We do not run analytics, telemetry, crash reporting, or advertising trackers.

2. How Your Images Are Processed

  • All image decoding, encoding, and conversion happens locally in your browser using Web Workers and WebAssembly.
  • Your images never leave your device.
  • No image data is sent to us, to any third party, or to any remote server.
  • Once you close the extension tab, all image data is discarded from memory. Nothing is persisted.

3. Permissions

Image Convert requests only the minimum permissions required to function:

  • Extension page access — to open the converter UI in a new tab.

We do not request:

  • host_permissions (no access to websites you visit)
  • activeTab / tabs (no access to your browsing)
  • storage (no saved settings, history, or files)
  • downloads (downloads use the standard browser download mechanism)
  • contextMenus (no right-click integration on web pages)

4. Network Activity

Image Convert does not make network requests. All required code, including WebAssembly modules for formats like HEIC and animated WebP, is bundled inside the extension. No CDN. No remote scripts. No "phone home" behavior.

5. Third-Party Services

There are none. Image Convert does not integrate with cloud storage, analytics platforms, advertising networks, or any external service.

6. Cookies & Local Storage

Image Convert does not set cookies and does not write to localStorage, sessionStorage, IndexedDB, or any other persistent storage. The extension is fully stateless — every session starts fresh.

7. Children's Privacy

Because Image Convert collects no data of any kind, it poses no privacy risk to children or any other user.

8. Security

  • Pasted SVG markup is sanitized to remove scripts, event handlers, and external references.
  • SVG content is rendered inside a sandboxed iframe with scripts disabled.
  • The extension follows Manifest V3 strict Content Security Policy: no inline scripts, no eval, no remote code execution.

9. Changes to This Policy

If this policy ever changes, the updated version will be published with a new "Last updated" date. Since the extension collects no data, any future changes will only further clarify our zero-data approach.

10. Contact

Questions about this privacy policy? Reach out to:

Tien — [email protected]