Your data never leaves your device.

LightConv is a static website. Every converter runs entirely inside your browser tab. There is no upload, no server-side processing, and no account.

What we don't do

No file uploads. When you drop a file into a converter, it is read by your browser's File API and processed in JavaScript or WebAssembly running on your machine. No bytes are transmitted to LightConv or any third party.
No text logging. Pasted text — JSON, CSV, JWTs, anything — stays in your tab. It is not sent anywhere.
No accounts, no cookies, no localStorage tracking. The only browser storage we use is a single localStorage key for your light/dark theme preference (lightconv-theme) and an optional service-worker cache so the site works offline. You can clear both at any time via your browser's site data controls.
No third-party scripts other than the optional analytics described below.

Analytics

When deployed with analytics enabled, LightConv sends anonymous page-view and aggregate usage events to Umami — a self-hosted, privacy-focused analytics tool that does not use cookies and does not track users across sites. The data is limited to:

Which converter pages were visited.
Anonymised conversion events: tool name, input size bucket (e.g. "1-10 KB"), runtime in milliseconds, and engine used. The actual content of your conversion is not included.
Browser type and approximate country (derived from IP, then discarded — IPs are never stored).

If you'd rather not be counted, any standard ad blocker or Privacy Badger blocks Umami requests; LightConv keeps working normally.

Third-party services

Google Fonts — Inter and JetBrains Mono are loaded from fonts.googleapis.com. Google receives your IP and User-Agent as part of this request. The site remains functional if these fonts fail to load (system fonts take over).
Buy me a coffee — only loaded if you click the link in the footer (external navigation).

Service worker / offline cache

On your first visit a small service worker is installed that caches the site shell plus the WebAssembly image codecs (~6 MB). This is what makes the tools work offline and start faster on subsequent visits. The cache lives only on your device. Clearing the site's data from your browser settings removes it.

WebAssembly codec downloads

When you first use HEIC or one of the WASM-backed image encoders, the corresponding codec module is fetched from the LightConv origin (a static asset). No personal data is sent in that request beyond what any normal asset fetch carries.

Children's privacy

LightConv does not knowingly collect any personal data from anyone. Children may use the site safely under the same terms as adults.

Changes to this policy

If we ever change how we handle data, this page is updated and the date below changes. There is no mailing list, so the easiest way to track changes is the project repository.

Contact

Security reports: security@lightconv.org (see also /.well-known/security.txt). General contact: same address.

Last updated: 2026-05-25