Privacy Policy

Last updated: April 22, 2026

1. Summary

heic.imtool.app (“the Service”) is a free, browser-based utility that converts HEIC and HEIF photos to widely-supported image formats. Processing happens entirely on your device — the files you choose are never sent to any server we operate. This Privacy Policy explains what little data we do collect, why, and the control you have over it.

2. File contents

The HEIC/HEIF photos you drop into the tool are decoded and re-encoded inside your browser using WebAssembly. We do not upload, copy, transmit, or log the contents of those files. There is no server-side image processing component.

3. Analytics

We use Google Analytics 4 (GA4) to understand aggregate usage: which pages are visited, how the tool is used, and where errors occur. We respect your consent:

  • Before consent. Analytics cookies are blocked by default via Google Consent Mode v2. Anonymized, aggregated signals (country, device type) may still be sent so we can count roughly how many people visit. No cookies are set.
  • After you click “Accept”. GA4 sets the cookies _ga and a property-specific _ga_* cookie on your device and collects standard GA4 metrics (pageviews, events, session duration, approximate location, device and browser info, IP anonymized to /24). Your choice is remembered in your browser’s localStorage as the key cookieConsent so you are not re-prompted.
  • After you click “Decline”. The banner hides, your choice is saved, and the state remains as it was before consent (no GA cookies, anonymized signals only).

GA4 data is retained for up to 14 months, then automatically deleted by Google. No advertising or personalization signals (ad_storage, ad_user_data, ad_personalization) are enabled on this site at the time of writing.

4. Server logs

Our web server (nginx behind Coolify on a VPS) may retain short-lived access logs containing your IP address, user agent, and the URL requested, for the purpose of operating and securing the Service. These logs are not analyzed for marketing and are rotated frequently.

5. Third parties

The Service relies on the following third-party providers:

  • Google LLC (Google Analytics 4) — see the Google Privacy Policy.
  • Let’s Encrypt — issues our TLS certificate. No personal data is shared with them beyond what is required for ACME domain validation.

6. Your rights

If you are in the European Economic Area, United Kingdom, or another jurisdiction with comparable data-protection laws, you have the right to:

  • Access a copy of the personal data we hold about you
  • Request rectification of inaccurate data
  • Request deletion (“right to be forgotten”)
  • Object to processing or withdraw consent at any time
  • Lodge a complaint with your local data-protection authority

Because we do not store personal identifiers linked to an account, in practice the most useful actions are: clicking “Decline” on the cookie banner, clearing your browser’s site data for heic.imtool.app, or using a browser-level opt-out (e.g. uBlock Origin, the Google Analytics Opt-Out browser add-on).

7. Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us so we can delete it.

8. Changes to this policy

We may update this policy to reflect changes in the Service or in the law. The “Last updated” date at the top will change when we do.

9. Contact

Questions, data-access requests, or privacy complaints: see the Contact page.