Security and local processing

These tools process selected files in your browser and create results for you to download. You do not need to send an image or document to a conversion server. This page explains that design and the checks you can make for yourself.

What happens when you open a file

Image tools use browser APIs and local encoders. Document tools read and write files using libraries running on your device. Selecting a file gives that page access to the selected file; it does not give the site access to every file on your device.

Pages still download their code, fonts and other assets. Background tools can need machine-learning models, and PDF tools can need additional worker or font files. Those downloads are website requests, rather than uploads of your document. The asset host receives ordinary connection information, including the requesting IP address.

HEIC support depends on your browser, operating system and file variant. When the browser cannot decode a source file, the tool shows a limitation instead of sending it elsewhere for conversion.

Inspect a real operation

1. Use a non-sensitive sample. Open your browser's developer tools and select the Network panel before loading the tool.
2. Choose the sample, run the operation and download its result. Inspect the destinations and payloads of requests made during those steps. A request's size alone does not establish whether it contains a file.
3. To test offline, first let that tool and its required assets finish loading. A successful offline operation demonstrates local processing; it does not replace inspecting requests online.

A first visit, a different operation or a cleared cache can require another download. Local processing does not promise that every feature is available offline at every moment.

Analytics is optional and separate from file processing

Google Analytics 4 loads only after you choose Accept analytics. Until then, no analytics tag, Google analytics request or analytics cookie is used. Global Privacy Control keeps it disabled. Keeping analytics off does not change the tools or their local file processing.

When allowed, analytics uses controlled page labels and canonical page addresses without query strings or fragments, referrer origins, coarse tool outcomes and download actions. Google can also receive consented browser and session metadata. We do not send file contents, names, document or financial entries, raw errors, exact file sizes or settings. A download action is not proof that a file was saved or accepted.

Include those optional Google requests when inspecting network traffic. Use Analytics preferences in the footer to turn measurement off without restarting your work. The control stops new measurement and removes accessible analytics cookies; it cannot withdraw information already received by Google.

The privacy policy explains browser storage, hosting requests and messages you choose to send.

Keep the original and check the output

• Compression and conversion can change detail, colour, transparency or animation. Read the tool's notices and inspect the downloaded copy.
• Removing photo metadata does not remove personal information visible in the picture. Local processing is not a guarantee of anonymity.
• Merging, splitting or deleting PDF pages is page management, not proof that confidential information has been securely erased. Read the relevant tool's limits and review the exported file.
• A size or dimension check does not guarantee acceptance by a government or application portal. Confirm its current official requirements, including whether an original image is required.
• A website cannot protect a file from other software, browser extensions or people with access to your device.

Contact the operator

YoursToUse is operated by MASTERPANEL LLC, Louisville, Kentucky, USA. Its Kentucky Secretary of State record is available to check. For a security question or vulnerability report, email hello@exactpic.com.