Privacy Policy

Last updated: August 1, 2026.

This page explains what data File Converter collects when you use the file-conversion service, why, and who else can see it.

What we collect

• `guest_id` cookie — an httpOnly, signed identifier that lets you use the conversion service anonymously (as a guest) without creating an account, and lets us associate your conversions and history with that anonymous identity.
• `locale` cookie — remembers your chosen interface language (English/Russian).
• `cookie_consent` cookie — remembers your choice ("Accept"/"Decline") in the cookie notice. The cookie itself is strictly necessary (it only stores the choice you made), but the optional convenience it unlocks — showing your conversion history on this device in the service — only works if you choose "Accept". Choosing "Decline" simply hides that history; converting files itself does not depend on this choice and works identically either way.
• Account profile data — if you sign in via Telegram or an OAuth provider (Google, GitHub, Yandex, VK), we receive and store basic profile information from that provider: your Telegram ID/username or, for OAuth, a verified email address, display name, username and avatar (exact fields depend on the provider). We also set an httpOnly session/refresh-token cookie to keep you signed in.
• Sign-in session cookies — a short-lived `tg_login_nonce` cookie during Telegram sign-in, and an httpOnly refresh-token cookie after a successful sign-in, both strictly necessary to complete and maintain the login.
• Uploaded files and conversion results — stored temporarily in our S3-compatible object storage while your conversion is processed and available for download, then automatically deleted (as soon as 24 hours for anonymous/guest use; longer, depending on your plan, for signed-in accounts).

We do not use analytics, advertising or third-party tracking cookies. All cookies listed above are strictly necessary to operate the conversion service itself.

Why we process this data

Solely to provide the file-conversion service: identifying your conversions (as a guest or a signed-in user), keeping you signed in, remembering your language choice, storing your files while they are converted, and enforcing usage limits.

Who else processes this data

Uploaded files and results are stored in our S3/MinIO-compatible object storage. If you sign in via Telegram, the Telegram Bot API is used to deliver the sign-in link. If you sign in via an OAuth provider, that provider (Google, GitHub, Yandex or VK) processes the sign-in exchange on its side. We do not sell or share your data with any other third party.

How long we keep data

Uploaded files and conversion results are deleted automatically — within 24 hours for anonymous/guest usage, and after a longer period (up to 30 days) for signed-in accounts, depending on your plan. Sign-in cookies expire automatically (`guest_id` — 30 days after it is issued; the Telegram sign-in nonce — 5 minutes).

Your rights

At this stage (MVP) the product does not yet offer a self-service page to export or delete your account and data. To request access to, or deletion of, your data, please contact us — see Contact below — and we will handle it manually.

Contact

Questions about this policy, or requests regarding your data — message our Telegram bot: @anyconvertor_bot