FREEHEICTOJPG

Privacy notice

Last updated: 21 October 2026

Your photos stay on your device. This page explains the difference between local image processing and the connection information needed to deliver this website.

Your photos

When you choose a file, the website reads and converts it locally in your browser. We do not receive or store your original photos or converted images on our servers. The converter keeps files in memory in the current page so you can convert and download them. Use “Clear all” or close the page to release the app’s references to them. Downloads you save remain on your device.

Original metadata is excluded by default for JPG, PNG and WebP. If you enable “Keep metadata”, supported EXIF capture dates, camera and lens make/model, and exposure settings are copied locally into the output. GPS coordinates, altitude and GPS timestamps are included only when you also enable “Include GPS location” and supported coordinates exist. Both options start off. MakerNotes, serial numbers, thumbnails, XMP and unrecognised fields are not copied. Orientation and dimensions are updated for the converted image. Each result reports whether metadata was kept; missing, unsupported or damaged metadata may be omitted. Review your output before sharing. This is not a promise of anonymity: an image can itself contain personal information, and filenames are retained for your downloads.

Website delivery and security

Cloudflare delivers and protects this website. When you visit, Cloudflare processes technical connection information that can include your IP address, browser information, requested URLs and request timestamps. This is separate from your image files. These technical requests allow the website to load, operate and defend against abuse. Cloudflare operates an international network; its processing may take place outside your country.

Read Cloudflare’s Privacy Policy for its practices. We do not set a fixed retention period for infrastructure records controlled by Cloudflare.

Cookies and local storage

You can use the converter immediately. The site’s own code sets no cookies for visitors; the only cookies listed below are strictly necessary ones for the owner’s sign-in and, if a security check is ever needed, for Cloudflare. There are no advertising, analytics or tracking cookies, no third-party analytics scripts, and your photos and conversion history are not saved in browser storage. Essential settings such as your theme are kept in your browser’s local storage. These essential items are automatically on, and on your first visit a small notice says so. It is information, not a consent request: selecting “Got it” only hides it. It does not switch on optional measurement, and we do not treat continued browsing as permission for optional tracking. Basic server-side statistics described below are separate from cookies and do not rely on a consent banner.

What the site may store on your device:

fhj-theme (local storage, only after you switch themes): remembers the light or dark display. Kept until you change it or clear browser data.
fhj-cookie-notice-v1 (local storage, after you select “Got it” on the notice): remembers that the notice was dismissed so it is not shown again. Kept until you clear browser data.
fhj-basic-choice-v1 (local storage, only after an explicit selection in Privacy choices): remembers whether you allowed or turned off conversion totals; see Basic conversion totals. Kept until you change it or clear browser data.
__Host-fhj-owner (cookie, site owner only): the private dashboard sign-in session; see Owner sign-in. Expires after eight hours or on sign-out.
Cloudflare security cookies: Cloudflare may set strictly necessary cookies when needed to protect the website, for example for bot management or a security challenge. Which cookies are used, and for how long, depends on the security configuration and whether a challenge is shown. See Cloudflare’s cookie information.

The theme and notice values are never sent to us; the Privacy choices value only decides whether conversion totals may be sent. To delete these items, clear this site’s cookies and site data in your browser settings. The theme then returns to light and the notice appears again on your next visit; the converter keeps working. If your browser blocks storage, the converter still works and the theme and notice choices last only for the current page. If stored values cannot be read at all, conversion totals stay off. If they can be read but not saved, totals follow the regional policy under Basic conversion totals until you make a selection in Privacy choices; because that selection cannot be saved, it turns totals off for the rest of that page.

Basic website statistics

We measure page views and estimate daily unique visitors on our server to understand use of the service. This does not use an analytics script, tracking pixel, advertising identifier or visitor cookie. For eligible page requests, we temporarily process your IP address and create a keyed, daily-changing hash. Our statistics database stores that daily hash and the day, not your raw IP address, browser details, full requested URL, referrer, filename or photo contents. This is pseudonymous technical data, not a guarantee of anonymity. Browser information is inspected transiently to filter known bots.

A shared IP address may represent several people, and changing IPs may count the same person again. Daily totals therefore estimate activity, not verified individual people. We skip measurement when the browser sends Do Not Track (DNT: 1) or Global Privacy Control (Sec-GPC: 1), as well as known bot and prefetch requests. No cross-day visitor identifier is created.

Daily visitor hashes are removed from the active database by an hourly cleanup after their day is more than two report days old (normally within about 73 hours). Aggregate daily counts are retained for up to 90 report days. These records are processed through Cloudflare Workers and D1. Infrastructure backups may retain deleted records for the applicable Cloudflare recovery window; see D1 recovery retention. Statistics are restricted to the site owner.

Basic conversion totals

To maintain and improve this converter, we count daily totals by input/output format, outcome (success, partial success, error or cancellation) and number of output files. A batch is one operation. Only these aggregate values are sent; no files, filenames, file contents, sizes, image settings, visitor IDs or individual conversion histories are sent to this counter. No cross-site or advertising use is made of these totals. They are retained for up to 90 report days in Cloudflare D1.

Our regional policy permits basic counting in Turkey, the United Kingdom and France unless you object. Other or unknown regions require an explicit choice before conversion results are sent. The region is checked transiently and is not stored with counts. DNT and GPC disable the counter. Open Privacy choices in the converter footer to turn totals off or explicitly allow them. Tools work either way; opening the panel or continuing to browse does not grant consent. Only an explicit choice is saved in local storage as fhj-basic-choice-v1, until you change it or clear browser data. Browser privacy settings and blocked preference storage can prevent measurement.

A separate keyed IP rate-limit bucket helps prevent abuse. It is not joined to conversion totals, expires after 15 minutes and is removed by hourly cleanup. Page-view statistics described above are separate. Operation totals may include owner tests, omit blocked or interrupted reports and cannot verify every submitted report.

The private owner dashboard sets a necessary session cookie called __Host-fhj-owner only after successful sign-in. It is Secure, HttpOnly and SameSite=Strict, expires after eight hours and is removed on sign-out. A hashed session token is held on the server for authentication. Failed and successful sign-in attempts use short-lived keyed IP summaries to limit repeated attempts; these expire after 15 minutes and are cleaned up hourly. Owner visits made with a valid session are excluded from visitor statistics.

Advertising

Advertising is not currently active. The private dashboard models hypothetical advertising revenue from aggregate counts; it does not send information to Google or display real AdSense earnings. Before introducing advertising technologies that require consent, we will update this notice and provide the required privacy choices. No image file data will be provided to advertisers by the converter.

Your choices

You choose which files to open and which results to download. You can clear the batch or close the page at any time. Your browser’s settings let you manage cookies and downloaded files. We cannot retrieve, inspect or delete photos that remain exclusively on your device.

Changes to this notice

Updates will be published on this page with a new revision date. Check this notice before using any newly introduced advertising, account or upload features.