Privacy Policy — HeicToPdf
How HeicToPdf handles your photos and data when you convert HEIC to PDF in your browser.
Privacy at a Glance
Your photos never leave your device — that is the core promise of HeicToPdf.
- No file upload. HEIC files are decoded and rendered into a PDF inside your browser. They are never sent to our servers.
- No account required. We do not ask for an email address, name, phone number, or any sign-in credential.
- Minimal analytics. We collect anonymized, aggregated usage signals (page views, country-level region) to improve the tool. We do not profile individual users.
- Transparent advertising. If we ever show ads, they are served by Google AdSense and you can opt out of personalized advertising at any time.
- Your consent, your call. We display a cookie banner on your first visit. You can accept, decline, or change your choice at any time from the footer.
1. Introduction and Scope of This Policy
This Privacy Policy explains what data HeicToPdf collects, why, and how to exercise your rights.
HeicToPdf (referred to here as “we”, “us”, or “our”) provides a free online tool that converts HEIC and HEIF photos into PDF documents. This Privacy Policy applies to the website located at our primary domain and any subdomain that links to it.
By using HeicToPdf you agree to the practices described in this policy. If you do not agree, please discontinue use of the site. We have written this document in plain language so you do not need a lawyer to read it.
2. What Information We Collect (and What We Do Not)
Almost nothing about you, and absolutely nothing about your photos.
Because HeicToPdf is a browser-based tool, the vast majority of work happens on your own device. The information we collect falls into two short categories.
2.1 What we do NOT collect
We do not collect, store, transmit, log, or otherwise process any of the following:
- The HEIC or HEIF files you select for conversion.
- The PDF documents generated by the tool.
- Thumbnails, metadata (EXIF, GPS), or embedded previews of your photos.
- Your name, email address, phone number, home address, or any contact information.
- Account credentials — there is no account system on HeicToPdf.
- Payment information — the basic tool is free and does not require a card.
2.2 What we do collect
We collect only the minimum data needed to operate, secure, and improve the service. Concretely:
- Aggregated analytics. Anonymized page-view counts and country-level region (never precise location) to understand which tools are most useful.
- Server logs. Standard web-server logs (IP address truncated, User-Agent, requested URL, response code, timestamp) retained for 30 days for security and abuse prevention.
- Error reports. If a page crashes, we may receive a stack trace with the error message. Reports never include the file you were converting.
- Cookie consent choice. Whether you accepted or declined non-essential cookies — stored in your browser's localStorage so we remember your preference.
3. How We Use the Limited Information We Collect
We use the small amount of data we collect for the following purposes only:
- Service operation. To deliver the converter page, route your request to the nearest edge node, and respond with the correct HTML and assets.
- Security and abuse prevention. To detect and block scraping, automated abuse, and distributed denial-of-service attacks against the site.
- Product improvement. To understand which features are used, which pages load slowly, and where users get stuck. Decisions are made on aggregated counts, not on individual sessions.
- Legal compliance. To comply with applicable laws, court orders, and valid requests from law enforcement.
5. Third-Party Services and Advertising
We rely on a small number of third parties to operate the site. Each is bound by its own privacy policy.
5.1 Google AdSense
We use Google AdSense to display advertisements. Google may use cookies to serve ads based on your prior visits to our website or other websites on the Internet. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites.
You can opt out of personalized advertising by visiting Google Ads Settings (https://adssettings.google.com). You can also install the Google Analytics opt-out browser add-on to prevent your data from being used by Google Analytics.
5.2 Cloudflare (Hosting and Edge Network)
Our static assets are served from Cloudflare's global edge network. Cloudflare processes IP addresses for routing and security but is contractually bound to use them only for those purposes. See Cloudflare's Privacy Policy for details.
5.3 Analytics Provider
We may use a privacy-respecting analytics provider that does not require cookies and does not collect personal identifiers. Aggregate counts are used to improve the tool.
6. Data Security Measures
Because we never receive your photos, the most sensitive data simply never leaves your device.
We take reasonable measures to protect the limited data we do hold:
However, no method of transmission over the internet is 100% secure. We are not responsible for unauthorized access or data breaches that occur outside our reasonable control. If a breach affecting your data ever occurs, we will notify affected users in accordance with applicable law.
- TLS 1.3 encryption for all traffic between your browser and our edge.
- No long-term storage of server logs (rolling 30-day retention).
- No third-party scripts that can read your file contents.
- Regular review of access controls to the build and deploy pipeline.
7. Children's Privacy
HeicToPdf is intended for users aged 13 and over. We do not knowingly collect any information from children under 13. If you believe a child under 13 has interacted with the site in a way that may have transmitted personal data, please contact us at the address below so we can investigate.
8. Your Rights and Choices
Because we collect so little, most rights are easy to honour.
- Access. You can request a copy of any personal data we hold about you. Given the limited scope, this is usually a short conversation over email.
- Deletion. You can ask us to delete any personal data we hold. Because we do not hold much, deletion is usually a no-op — but we will confirm in writing.
- Opt out of cookies. Use the in-page consent banner, your browser's privacy settings, or the Global Privacy Control signal to refuse non-essential cookies.
- Opt out of personalized ads. Visit Google Ads Settings to disable personalized advertising.
- Complain. If you are in the EEA, UK, or California, you have the right to lodge a complaint with your local data protection authority.
9. International Data Transfers
Our edge network spans multiple continents. Aggregated analytics may be processed in the country closest to your request to keep latency low. Where required, we rely on Standard Contractual Clauses or equivalent transfer mechanisms to protect your data in transit.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be posted on this page, with a revised “Last updated” date at the top. If a change is material, we will surface a notice on the home page for at least 30 days before the new terms take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy, want to exercise a right, or believe we have mishandled your data, please contact us at support@heicpdftools.com. We aim to respond within 5 business days.