Privacy Policy
This policy describes the personal data UltConvert Media collects when you visit ultconvert.com or use its tools, what we do with it, who else receives it and how long it is kept. It also explains your choices about cookies and advertising and the rights you have under privacy laws such as the GDPR, the UK GDPR and the California Consumer Privacy Act.
Operated by UltConvert Media
On this page
Who is responsible
UltConvert is operated by UltConvert Media ("we", "us"). For the purposes of the GDPR and the UK GDPR we are the controller of the personal data described here, with the exception of data that Google and Microsoft collect as independent controllers through their own cookies (see below).
Questions about this policy and requests about your data go to [email protected]. Putting "Privacy" in the subject line helps us route your message.
Files you convert
Choosing a file on a tool page does not upload it. Your browser first checks the file type, size and number of files, and draws thumbnails or page previews locally. Only when you press the convert button is the file sent, over an encrypted HTTPS connection, to our processing servers together with the options you picked.
We use the file for one purpose: producing the output you asked for. The original is removed as soon as the output has been created. The output is kept just long enough for you to download it and is deleted automatically 30 minutes after processing, at which point its download link stops working. Files are not copied to backups, and we cannot restore a file once it has been deleted.
We do not look at, index, publish or sell the content of your files, and we do not use them to train or improve machine-learning models. File names and file contents are not written to our logs. Some tools, such as text recognition and audio transcription, read the content of a file automatically because that is the job; the extracted text is returned to you and deleted with the rest of the output.
- Please do not convert files you are not allowed to share with a third-party service, for example confidential documents under a non-disclosure agreement.
- If a file contains personal data about other people, you are responsible for having a lawful reason to process it; we act only on your instructions when we process it.
Tools that run in your browser
Unit and size converters, time zone and world clock pages, date calculators, countdowns, the color tools and the developer tools compute their results with JavaScript on your own device. What you type into them is not sent to us. The same applies to the file checks and previews described above.
Technical data and server logs
Like almost every website, our servers record basic data about each request so the site can be delivered, protected and fixed. This includes your IP address, the date and time, the page or API address requested, the browser and operating system reported by your device, the referring page and the response status. For conversion jobs we also log the tool used, the number of files, their type and size, the processing time and any error, but never the file name or content.
Server logs are kept for up to 30 days and then deleted, unless a specific entry is needed longer to investigate abuse or a security incident. To stop automated abuse, a conversion request may pass a short, privacy-focused check by Cloudflare Turnstile, which evaluates signals from your browser to tell people and bots apart.
Google Analytics and Microsoft Clarity
We use Google Analytics 4, a service of Google LLC and, for users in Europe, Google Ireland Limited, to count visits and understand which tools are used and where pages fail. It records events such as page views, the tool and options chosen, the number and total size of the files selected and whether a conversion was started. Google Analytics 4 does not store full IP addresses, and the event data we receive is kept for no more than 14 months. You can read how Google uses data from sites that use its services or install the Google Analytics opt-out add-on.
We also use Microsoft Clarity, provided by Microsoft Corporation, which shows how visitors scroll, click and move through pages as heatmaps and anonymised session recordings. Clarity masks text that you type into form fields, and it does not see the content of your files. Microsoft describes its handling of this data in the Microsoft Privacy Statement.
Advertising with Google AdSense
The tools are free because the site shows ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your earlier visits to this website or to other websites. Google's use of advertising cookies lets it and its partners serve ads to you based on your visits to this site and other sites on the internet.
You can turn off personalized advertising from Google in My Ad Center, and opt out of personalized ads from many other vendors at aboutads.info or, in Europe, youronlinechoices.eu. If you opt out you will still see ads, but they will be based on the page you are reading rather than on your browsing history. A list of the ad technology providers Google works with is shown in the consent message where one is required.
Your consent choices
If you visit from the European Economic Area, the United Kingdom or Switzerland, analytics and advertising cookies stay off until you agree to them. Until then, Google's tags run in a restricted mode that does not read or write those cookies, and any ads shown are limited and not personalised. A consent message from Google lets you accept, reject or choose by purpose, and you can change your decision later from the same message or by clearing the site's cookies in your browser.
Outside those regions, analytics and advertising cookies are used by default and you can rely on the browser settings and opt-out links above. Where a US state privacy law gives you the right to opt out of the "sale" or "sharing" of personal information for targeted advertising, you can exercise it through Google's opt-out tools or by emailing us.
Why we may use your data (legal bases)
- To carry out the conversion you request (performance of a contract or steps at your request): processing your files and returning the result.
- Legitimate interests: keeping server logs, preventing abuse and fraud, securing the service and fixing errors. These interests are balanced against your rights, and you may object.
- Consent: analytics and advertising cookies for visitors in the EEA, the UK and Switzerland. You can withdraw consent at any time without affecting what happened before.
- Legal obligations: keeping or disclosing information when the law requires it.
International transfers
Our providers operate servers in several countries, including the United States, so your data may be processed outside the country where you live. When personal data from the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, the transfer relies on safeguards such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.
How long data is kept
| Data | Kept for |
|---|---|
| Original files | Removed once the output has been created |
| Output files and download links | 30 minutes after processing |
| Server logs | Up to 30 days, longer only for a specific security investigation |
| Google Analytics event data | Up to 14 months |
| Emails you send us | As long as needed to answer and follow up, then deleted |
Security
Every connection to ultconvert.com and to our processing servers is encrypted with HTTPS. Uploaded files are stored separately from the website, can only be fetched through a download link that expires, and access to production systems is limited to the people who maintain them. No method of transmission or storage is perfectly secure, so we cannot promise absolute security, but we will tell affected users and the authorities about a breach where the law requires it.
Your rights in the EEA, UK and Switzerland
You have the right to ask for access to the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format and to withdraw consent. Because we have no accounts, the most useful detail you can give us is the approximate time of your visit and, for logs, your IP address at that time.
You may also complain to your local data protection authority, for example the authority in your EU country or the Information Commissioner's Office in the UK. We would appreciate the chance to answer your concern first at [email protected].
Your rights in California and other US states
In the last 12 months we have collected these categories of personal information: identifiers (IP address, cookie and device identifiers), internet activity (pages visited, tools used, interactions), approximate location derived from the IP address, and, if you write to us, your email address and message. They come from you and your device and are used for the purposes in this policy. We do not collect sensitive personal information for the purpose of inferring characteristics about you.
We do not sell personal information for money. Allowing advertising cookies on the site may count as "sharing" for cross-context behavioral advertising under the CCPA as amended by the CPRA. California residents, and residents of other states with similar laws, have the right to know what we collect, to request deletion or correction, to opt out of sale or sharing, and not to be treated differently for using these rights. Send requests to [email protected]; we may ask for details to verify the request, and an authorized agent may submit one on your behalf with your written permission.
Children
UltConvert is a general-audience service and is not directed at children under 13, or under 16 in the EEA and the UK. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.
Links to other websites
Our pages link to official sources such as government agencies and platform help centers, and ads may lead to other sites. Those sites have their own privacy practices, which this policy does not cover.
Changes to this policy
When our practices change, for example when we add a new service provider, we update this page and the "Last updated" date at the top. If a change materially affects how we use data we already hold, we will point it out on this page before it takes effect.
Something unclear on this page? Write to [email protected].