creatorvalet
FilesConvert, compress and reshape files — without uploading them anywhere.MetadataSee what your files quietly carry, then strip exactly what you choose.Text & dataFormatters, converters, and the character-encoding fixes nobody else gets right.PublishingCheck how your pages read to crawlers, to people, and to language models.CodesBarcodes, QR and identifiers that keep working after you publish them.CharactersFind the character you can draw but cannot name — and the font you cannot place.

Is Convertio safe?

Yes, on all available evidence. Convertio makes the firmest deletion promise of the six — and firmer wording is still not something you can check.

Updated 2026-08-07

Yes. And among the six converters we sat down and read this week, Convertio states its file-handling commitments more firmly than any of the others — which is precisely why it earned a page of its own.

A commitment that good deserves to be taken at face value, so let us take it that way. The service has been running since 2014, the policy answers the questions a policy is meant to answer, and we found nothing suggesting the company is other than what it presents itself as. The question this page asks is narrower and a little stranger. It is what a promise actually is — and what changes, and what does not, when the wording of one gets better.

Is Convertio safe? The part that turns on architecture, not on character

Conversion happens on Convertio’s own machines. Your file is copied from your computer to theirs, worked on there, and the result is handed back. That is the design rather than a weakness in it, and it buys the service abilities no browser tab has. But once those bytes depart, what becomes of them is something you can be told and never something you get to watch.

The thirty-second check shows exactly where a visitor’s own evidence runs out, and it works on any site — including this one.

Reading the privacy policy on August 7, 2026

We read Convertio’s privacy policy start to finish, on August 7, 2026. It shows no revision date and no change log. We record that neutrally rather than as a complaint: half the policies in our set are the same, and a visible date is a courtesy, not a duty. Everything below is what the document said on that day, and a policy can be rewritten tomorrow without anyone being told.

On files, the language is unusually direct, and it separates two things most policies leave blurred:

  • The file you hand over. “We delete input files and all temporary files instantly after any file conversion.” No button to press, no waiting period, no condition attached.
  • The file you get back. A separate matter. The result stays in your file list, goes immediately if you click the X beside it, and otherwise “output files are deleted after 24 hours automatically.”
  • Where it sits meanwhile. Under the security heading: “We keep your files in the European Union.” The GDPR section puts it at greater length — “keeping your data inside the EU throughout the whole file conversion process” — though that longer sentence is written about the case where Convertio processes data on an API customer’s behalf, not about a visitor converting one file.

The document adds, without hedging, that “We do not read, look into or copy your files.”

Set side by side with the rest, that is the strongest wording in the group. Unconditional instant deletion of the input beats everything else we read; the residency statement is a layer most of the field does not offer at all. Credit where it is genuinely owed.

Why better wording is not a different kind of knowledge

Here is the entire page in one observation.

Every line quoted above is an undertaking, authored by the party that also performs it, and revisable by that party at any hour without notice to you. Phrasing it well does not move it into another category. There is no formulation strong enough to turn a statement into a thing you can go and confirm. “Instantly” is a better word than “within 24 hours”. Both are words.

The symmetry runs our way too, and that is the honest half of it. This site also makes a promise: whatever you drop into a tool here stays on your machine. What separates ours is not that it is more elegantly written — it is that you can open the Network panel, run the tool, and watch the absence yourself, at which point our phrasing stops mattering at all. That is the only distinction this series is about. A neighboring page reaches the same place from another angle, on CloudConvert.

The front-page measurement, and what a count like this can mean

Our own script ran against convertio.co on that same date. It inspects only the markup the server hands back, and tallies the outside domains named inside it. Anything a script adds after the page has loaded sits outside what the method is able to see. So the figure means: outside domains named in the delivered markup. It does not mean the site pulls in nothing beyond them.

Six came back — the highest count in the run. Two are Google’s font hosts (fonts.googleapis.com and fonts.gstatic.com). One is Google’s JavaScript client, apis.google.com. Two are the tag manager and analytics pair, www.googletagmanager.com and www.google-analytics.com. The last is Facebook’s SDK at connect.facebook.net.

Do not read that alongside the deletion wording as though the two collide, because they describe different objects. Analytics and advertising hosts gather things about the visitor — pages viewed, browser, address — which is unremarkable for an ad-funded free service, and the policy names Google Analytics and AdSense openly rather than leaving them to be discovered. None of the six stands anywhere near your file. A busy front page and a careful file pipeline are perfectly able to coexist, and this policy says they do.

The policy also demonstrates our method’s ceiling for us, free of charge. It names AdSense; our tally contains no AdSense host, because that one arrives by script once the page is running. Six is a floor. We would sooner publish a number with its ceiling openly missing than dress it up as a total.

What Convertio can do that a browser tab cannot

The gap is real and worth spelling out:

  • OCR. Recognizing text in a scanned page, with over seventy languages offered in the selector. We ship none at all. Our PDF to text tool reads characters that are already characters; give it a scan and it will come back empty, and it tells you so.
  • Breadth of formats. Archives, fonts, presentations and e-books, on top of the usual audio, video, image and document work. About 55 tools live here, one format pair per address.
  • Where files arrive from. Import straight out of Drive or Dropbox, an API, an account that remembers your history. None of that exists here, and none of it is planned.
  • Sheer size. Server hardware simply has more headroom than a tab, and always will.

When the task at hand is four hundred scanned pages that have to become searchable text, you are on the wrong page and Convertio is a sound answer. Saying so plainly is the part that makes everything above worth reading.

When the file has no business leaving your desk

It goes the other way when the document is sensitive, the conversion is ordinary, and your own laptop is equal to it. A countersigned contract, a payroll export, a scan of an ID card, a photo whose metadata still records the street it was taken on — for those, the route worth taking is the one with no journey in it.

That is what lives here: CSV viewer for a spreadsheet you would rather not hand to anyone, PNG to JPG and JPG to PDF for the everyday image jobs. Every one of them finishes inside the tab that is already open. Not because we suspect your file would be mishandled elsewhere — but because bytes that never move ask nobody to vouch for them.