Last updated 7 October 2026
Most tools on this site run inside your own browser. When you compress a PDF, convert a photo, merge documents or extract text from an image, the file is read by your own device, processed there, and handed back to you. It is not sent to us, and we never receive a copy.
Four optional features do send data to a server, and they are named below. Apart from your files, the site also handles a small amount of other information: anonymous usage statistics, error reports, the network address that our server features see, messages you choose to send us, and Google’s advertising. Each is described on this page.
For every tool that runs in your browser, the file’s contents and its name stay on your device. Our statistics and error reports describe a file only by its type and approximate size, and the site removes file names from error messages before a report is sent.
Audio and video transcription. This site does not run speech recognition on your device. The page asks before it sends anything. If you agree, the recording is sent to our server function, which passes it to an outside AI speech-recognition service — OpenAI’s transcription model, reached through Lovable’s AI gateway. The resulting text is tidied and summarised by Google’s Gemini model the same way. We do not store the audio after the transcript is produced; those providers process it under their own terms. If you save a transcript, it is kept in your own browser’s storage on your device.
Converting from a link. When you paste a link, our server fetches that address on your behalf, because a web page cannot download from another site directly. We receive the address you pasted and the media at it. The media is passed back to you and not stored.
Optional download link. Some browsers, notably on some iPhone configurations, block a direct download. You can then press a button that places that one result, with its file name, in private storage so a normal https link can be given to you, which you can also copy. This happens only when you press it. The link stops working after 24 hours, and an automatic clean-up removes stored copies older than 24 hours each time the feature is used.
Smart column detection. The spreadsheet tool can offer to work out what your columns mean. Pressing it sends your column headings and a sample of the rows — up to ten thousand of them — to our server function, which passes them to Google’s Gemini model through Lovable’s AI gateway. The file’s name is not sent. It runs only when you press it. Splitting a spreadsheet, exporting CSV and mapping the columns yourself never send anything, and the rows are not stored after the answer comes back.
When you use one of these four features, our server also sees your device’s network (IP) address, as any server does. To stop abuse we count requests per address; that count is deleted once it is more than two hours old, the next time a limit is checked. We do not put IP addresses in our statistics.
We record which pages are viewed, which tool was started, which tool produced a result, whether the download button was pressed, an optional one-tap yes or no to “Did this solve your problem?”, whether the browser identifies itself as an automated crawler, and the host name of the site that referred you (for example "google.com" — never the full address). Each browser tab is given a random identifier held in session storage so we can tell one person reading five pages from five people reading one. That identifier is not derived from anything about you, is not a cookie, and disappears when you close the tab.
We also record a country, so we know roughly where the site is used. It is worked out from your device's own time-zone setting — for example a clock set to "Asia/Amman" is counted as Jordan — and never from your IP address. A time zone we do not recognise is left blank rather than guessed at.
These records do not contain IP addresses, device fingerprints, names or file contents.
When a conversion fails, the site records what went wrong so it can be fixed: the page, the tool, the error message, the type and size of the file, and your browser version. It records the file's type and size, never its contents, and file names are removed from the message before it is sent.
We also record whether each conversion succeeded, how long it took, and a short description of the kind of file it was: the extension, what the first few bytes say the format really is, the type your browser reported, and a size band such as "under 10 MB". This is how we find out that, say, iPhone photos renamed to .jpg are failing. It describes the file, never you.
If you email support@oneclickconvert.app, your message, your email address and anything you attach are received by our email provider (Resend), stored in our mailbox so we can answer, and may be forwarded to the site owner’s own inbox. If you use the “Missing a conversion?” form, we store the two formats you name, your note, and your email address only if you choose to give it. We use these only to reply and to decide what to build. You can ask us to delete them at any time.
This site is free and is supported by advertising. Where ads are shown they are served by Google AdSense, a third party with its own privacy policy. Every ad request this site makes asks Google for non-personalised ads: the setting is made on every page before Google’s script runs, and you can see it yourself as npa=1 in the ad request in your browser’s developer tools.
Google, as a third-party vendor, uses cookies to serve ads on this site. In Google’s own words, non-personalised ads “are not based on a user's past behavior. Instead, they use contextual information, including coarse geo-targeting (such as city-level) based on current location, content on the current site or app, or current query terms”, and although they “don't use cookies or mobile ad identifiers for ad targeting, they do still use cookies or mobile ad identifiers for frequency capping and aggregated ad reporting”. So an ad here is chosen from the page you are on and roughly where you are, never from what you did on other sites. You can review what Google holds about you at myadcenter.google.com, turn off personalised advertising across Google at Google’s Ads Settings, and read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.
For visitors in the European Economic Area, the United Kingdom and Switzerland, that use of cookies still needs your consent, so we use Google’s own consent message, set up in our AdSense account, to ask for it, and that message lets you change your choice later. The tools work either way: declining does not lock, limit or slow down any feature on this site.
While Google is still reviewing this site, the same ad spaces may show display banners from Adsterra (Adsterra Ltd) instead of Google ads; Adsterra is another third party with its own privacy policy. We use banners only — no pop-ups, pop-unders, redirects or full-screen formats. Each Adsterra banner is loaded in a sealed frame: the browser gives it no access to this page, to the file you are working on, or to this site’s cookies and storage, it cannot set or read cookies of its own, and it cannot move the page somewhere else. Like any server a page loads something from, Adsterra receives your network address, basic details of your browser and the address of the frame, which names this site.
Google ad code is never placed on pages written in a language Google does not support for advertising — Persian, of the fifteen languages this site is published in. Adsterra banners can appear on those pages while they fill the ad spaces, because that restriction is Google’s alone.
We do not give advertisers your files, your file names, or anything you convert. The four server features named above use what they receive only to carry out the job you asked for; it is never passed to an advertiser and never used to target an ad.
Converted results are kept briefly in your browser's own storage so you can pass a file from one tool to the next without choosing it again. This stays on your device, is capped in size, and clears itself after 24 hours. Your language choice, your settings and any transcripts you save are kept there too. You can remove all of it at any time by clearing this site's data in your browser.
There are no visitor accounts. Every tool works without signing in. The only sign-in on the site is for the owner’s administration console.
This site is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, for example by email, write to us and we will delete it.
OneClick Convert is run by VibeSolutions, which is the data controller for the information described on this page. You can reach us at support@oneclickconvert.app.
Where the law of your country uses the idea of a legal basis, ours are these. Running the tools and features you ask for, and answering messages you send, is necessary to provide the service you requested. Keeping anonymous usage statistics, error reports and rate limits rests on our legitimate interest in a site that works and is not abused. Personalised advertising cookies set by Google rest on your consent where the law requires it, which you can give or withdraw through the controls linked above.
For a short time in September 2026 the site accepted voluntary contributions. They are closed and nothing on the site can be bought. If you made one, the payment was handled by Paddle.com Market Ltd, the Merchant of Record for that transaction, which collected the payment details, name, billing address and email needed to take the payment and meet tax obligations under its own privacy notice. We never saw your card details; we received the fact of the contribution, its amount, and the email address Paddle passed back.
Usage statistics, conversion records and error reports contain nothing that identifies a person; we keep them as the record of how the site works and what has been fixed, and they have no fixed deletion date. Rate-limit counts are deleted once they are more than two hours old, the next time a limit is checked. Download-link files expire after 24 hours, as described above. Emails and conversion requests are kept until they are no longer needed to answer or follow up, or until you ask us to delete them. Records of a past contribution are kept as long as tax and accounting law requires.
Traffic to the site is encrypted in transit, and access to the database is restricted by row-level rules so that the statistics, reports and messages above can be read only by the site’s administrator. Administration is limited to the owner’s account. No system is perfect, which is one more reason the tools that can run in your browser do so.
Because the statistics and reports do not identify anyone, we usually cannot link them to you. If you emailed us, sent a request with your email address, or made a contribution, you can ask to see, correct or delete what we hold by writing to support@oneclickconvert.app. Depending on where you live you may have further rights under the GDPR or similar laws; we will honour them.
If this policy changes materially we will update the date at the top. Questions go to support@oneclickconvert.app.