Privacy Policy

What We Do NOT Collect

This is the most important section of this policy. Unlike server-based file converters, FileDex processes everything locally. We do not collect, transmit, store, or have access to:

• Your files — no file content, file name, file size, or file metadata ever leaves your browser
• Personal information — no names, email addresses, phone numbers, or accounts
• Cookies — we do not use cookies of any kind
• Session data — we do not track individual sessions or create user profiles
• Fingerprints — we do not use browser fingerprinting techniques
• Location data — we do not collect precise geolocation
• Camera, microphone, or sensor data — access to these is blocked at the HTTP header level via Permissions-Policy

You can verify these claims yourself. FileDex includes a "Verify Privacy" feature that uses your browser's built-in PerformanceObserver API to monitor network activity during file processing. No outbound network requests are made with your file data — this is provable, not just promised.

What We Do Collect

We collect a minimal amount of anonymous, non-personal data to understand how the site is used and to fix errors.

Analytics (Umami)

We use Umami, a privacy-respecting, open-source analytics tool. Umami does not use cookies, does not collect personally identifiable information, and does not track users across websites. The data Umami collects includes:

• Page views (which pages are visited)
• Referrer (what site linked to us)
• Country (derived from IP, but the IP itself is not stored)
• Device type (desktop, mobile, tablet)
• Browser and operating system (general category only)
• Custom events: which conversion types are used (e.g., "MP4 to GIF"), which format pages are viewed, which operations are used

Umami anonymizes all visitor data at the point of capture. No individual user can be identified or tracked from this data.

Error Monitoring (Sentry)

We use Sentry to detect and fix software errors. When an error occurs in the application, Sentry may capture:

• The error message and stack trace
• Browser type and version
• Operating system
• The page URL where the error occurred
• IP address (processed by Sentry for error grouping, not stored long-term by us)

Sentry does not capture file contents, file names, or any data you are processing. Error reports are used solely to fix bugs and improve reliability.

Hosting (Vercel)

Our site is hosted on Vercel. Vercel may process server access logs that include IP addresses and request metadata as part of standard web hosting. We do not access or analyze these logs. Vercel's own privacy policy governs their data handling: https://vercel.com/legal/privacy-policy

Search Console (Google)

We use Google Search Console to monitor how our pages appear in search results. This tool shows us aggregated search queries and click data. It does not identify individual users and we have no access to personal data through it.

How File Processing Works

When you drop or select a file in FileDex:

1. Your browser reads the file from your local device
2. Processing engines run entirely inside your browser:
   • FFmpeg WASM for video and audio conversion
   • Canvas API for image conversion
   • PDF.js for PDF rendering
   • pdf-lib for PDF modification
3. The converted file is created in your browser's memory
4. You download the result directly — no server involved

At no point does your file, or any part of it, leave your device. There is no upload, no server-side processing, and no temporary storage on our servers.

Security Measures

• COOP/COEP headers: We enforce Cross-Origin-Opener-Policy: same-origin and Cross-Origin-Embedder-Policy: require-corp, the strictest browser security policies available
• Content Security Policy: No inline scripts, no eval(), WASM from our domain only
• Permissions-Policy: Camera, microphone, and geolocation access are explicitly denied
• HTTPS only: All connections are encrypted via TLS
• No third-party tracking scripts: No Google Analytics, no Facebook Pixel, no advertising trackers

Your Rights

Regardless of where you are located, you have the right to:

• Know what data we collect — this policy describes it fully
• Request deletion — since we collect no personal data, there is nothing to delete. If you believe we hold any information about you, contact us and we will investigate
• Opt out of analytics — you can block the Umami analytics script using any ad blocker or browser privacy extension. The site works fully without it
• Withdraw consent — since we do not require consent for any data processing (we collect no personal data and use no cookies), there is no consent to withdraw

For Oman Residents (PDPL)

FileDex complies with the Sultanate of Oman's Personal Data Protection Law (Royal Decree 6/2022). Since we do not collect personal data as defined by the PDPL, the consent and processing requirements do not apply to our analytics. If you have questions about your rights under the PDPL, contact us at the address below.

For EU/EEA Residents (GDPR)

FileDex does not collect personal data as defined by the GDPR. Our analytics tool (Umami) is cookie-free and does not process personally identifiable information. No consent banner is required because no personal data processing occurs. You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

For California Residents (CCPA/CPRA)

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. Since we do not collect personal information as defined by the CCPA, consumer rights requests (access, deletion, opt-out) do not apply. However, we will respond to any inquiry you send us.

Children's Privacy

FileDex does not knowingly collect any personal information from anyone, including children under the age of 16. Since no personal data is collected, no special provisions are necessary. The service is a general-purpose file conversion tool available to all ages.

Third-Party Links

Format encyclopedia pages may contain links to external websites (specification documents, software tools, reference implementations). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Data Retention

• Files: Never stored. Files exist only in your browser's memory during processing and are cleared when you close the tab or navigate away
• Analytics data: Retained by Umami in aggregate form. No individual-level data exists to retain
• Error data: Sentry retains error reports for 90 days by default

Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated date. Since we do not collect email addresses or have user accounts, we cannot notify you directly of changes — please check this page periodically.

Contact

If you have questions about this privacy policy or our data practices:

Email: adnan@filedex.io
Location: Oman