Privacy Policy

Summary

• HEIC to JPG, PNG and WebP conversion happens in your browser. Your photos are not uploaded to our servers.
• Conversions that create HEIC files (JPG, PNG or WebP to HEIC) are performed on our server because browsers cannot encode HEIC. Those files are processed in memory, never stored, and deleted immediately after the result is returned.
• We don't sell personal data and we don't use your photos for any purpose.
• Analytics and advertising cookies are only used after you consent, where consent is required.

Who we are

HEIC.IS (“we”, “us”) operates this website. You can reach us via the contact page.

Your photos

In-browser conversion

When you use our HEIC → JPG, PNG or WebP tools, the HEIC viewer or the compressor, your files are read by your browser and processed by code running on your device. The images and their contents are not transmitted to us or to any third party.

Server-side conversion

When you use JPG to HEIC, PNG to HEIC or WebP to HEIC — or when you explicitly accept the “Convert on server” option because your browser cannot complete a conversion — the selected file is sent to our server over an encrypted (HTTPS) connection. On the server:

• the file is validated (signature, size and dimensions) and converted;
• temporary files, if any are needed by the encoder, are created in a private directory and deleted as soon as the conversion finishes;
• the converted image is returned to your browser and not kept;
• we do not log file names, image contents or metadata.

Technical logs record events such as “a conversion succeeded” with the file format and approximate size, so we can operate and secure the service.

Data we collect

Technical data

Our servers process your IP address to deliver the website and protect it against abuse (for example rate limiting). In our application logs, IP addresses are replaced by a keyed, one-way hash. Server logs are kept for a limited time for security purposes.

Contact form

If you use the contact form, we store your name, email address, subject, message, the language of the page and a hashed form of your IP address. We use this only to answer you and to prevent spam, and we delete messages when they are no longer needed.

Analytics (optional)

With your consent, we use Google Analytics 4 to understand how the site is used — for example which tools are opened and whether conversions succeed. We never send file names, image content or metadata to analytics. Google Analytics uses cookies; see the cookie policy.

Advertising (optional)

With your consent, Google AdSense may show ads on this website and use cookies to personalise and measure them. Google's use of advertising cookies is described in Google's advertising policy (opens in a new tab). Where required, you can refuse advertising cookies and still use every tool.

Cookies and local storage

We use a small number of necessary cookies and local storage entries — for example to remember your consent choice, language preference and theme. Optional cookies (analytics, advertising) are only set with your consent. Details are in the cookie policy. You can change your choice at any time via Cookie settings in the footer.

Legal bases (EEA/UK visitors)

• Providing the service and security — our legitimate interest in operating a safe, reliable website.
• Contact form — our legitimate interest in answering your request, or steps prior to a contract you request.
• Analytics and advertising cookies — your consent, which you can withdraw at any time.

Sharing and international transfers

We use service providers such as our hosting provider and, if you consent, Google. These providers process data on our behalf or as independent controllers under their own terms, and may process data outside your country with appropriate safeguards.

Retention

• Photos: not stored (see above).
• Contact messages: kept only as long as needed to handle your request.
• Consent choice: stored in your browser for up to six months.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict processing, to data portability, and to withdraw consent. California residents may request information about and deletion of their personal information; we do not sell or share personal information for cross-context behavioural advertising without consent. To exercise your rights, contact us via the contact page. You may also lodge a complaint with a data protection authority.

Children

HEIC.IS is a general-audience tool and is not directed at children under 13. We do not knowingly collect personal data from children.

Changes

We may update this policy when our service or legal requirements change. The date of the latest update is shown at the top of this page.