We don't have your files.

Every conversion on UboraConvert runs in your browser. Your files never leave your device. This is verifiable and we encourage you to check.

How to verify this yourself: Open Chrome DevTools (F12) → Network tab → drop a PDF into any of our tools and click Convert. You'll see the third-party JS libraries load once on first visit, then nothing — no upload requests, no analytics pings, no telemetry.

What we collect

From you: nothing. We have no accounts, no email collection, no contact form, no payment flow. We've never seen your files because there is no server that receives them.

What your browser stores on your own device (localStorage, never sent to us):

Your last-used tools list (so the "Recently used" row works)
Nothing else

Third-party services

UboraConvert loads JavaScript libraries from Cloudflare CDN, jsDelivr, and unpkg. These CDNs see your IP address when their libraries download, the same way any website with third-party scripts does. They do not see your files (the files never leave your browser to be sent anywhere).

The site is hosted on Cloudflare Pages. Cloudflare sees standard web-server logs: IP, user-agent, requested URL. They do not see file contents (again, files don't transit).

The optional Background Remover tool downloads an open-source ONNX AI model (~25 MB) from jsDelivr the first time it's used. The model runs on your CPU/GPU locally.

Cookies

We don't set any cookies. Cloudflare may set a __cf_bm cookie for bot-detection — that's a standard part of Cloudflare's infrastructure and contains no personally-identifiable information.

Analytics

We don't run analytics. There is no Google Analytics, no Mixpanel, no Plausible, no PostHog, no anything. We've made a deliberate trade-off: we know less about how people use the site, in exchange for not having any data about you to lose.

Children's data

We don't collect data from anyone, including children.

Your rights under GDPR / CCPA

You have the right to access, correct, and delete personal data we hold about you. The exercise of those rights is unusually simple in our case: we don't hold any personal data about you, so there's nothing to access, correct, or delete.

Security

The site is served over HTTPS with HSTS preload. JS bundles run in your browser's sandbox. We use a strict Content Security Policy to prevent injection of third-party scripts. The browser does the work; the browser's security model protects your files.

Changes

If this policy changes, the new version replaces this page. The change history is publicly visible in our git repository.

Contact

UboraConvert is built by Uborasys. If you have questions: uborasys.com.