iformat

What actually happens to your files.

No legal fine print. Here's a plain-English tour of how iFormat handles your uploads, including the parts most free file tools don't want to talk about.

TLS 1.2+ everywhere

Every upload and download rides encrypted HTTPS. Nothing goes over the wire in the clear.

1-hour auto-delete

Server-processed files are wiped within 1 hour. No backups, no cold storage, no "just in case" copies.

Isolated per-request workers

Image cropping and resizing run entirely in your browser, those files never leave your device. Everything else gets its own temp directory.

No ad networks

The site serves no advertising. No file you upload is retained, inspected, shared or used for training, and nothing about a conversion is sold or handed to a data broker.

The full journey of a file

Here's the sequence of events when you drop a file into an iFormat tool:

  1. Your browser handles it first where it can. Image cropping and resizing run on the HTML canvas on your device, and nothing is uploaded at all. Everything else needs a server step.
  2. If a server-side step is neededthe file uploads over HTTPS to our Hetzner-hosted infrastructure in Helsinki, Finland.
  3. The file lives in a per-request temp directory. It's readable only by the worker that's processing it. No shared storage, no S3 bucket with a public prefix.
  4. Once the conversion is doneyou download the result. Both the upload and the output are permanently deleted within 1 hour, usually within a few minutes of your download.
  5. We keep no copy. Not for QA, not for training data, not for anything.

What we log - and what we don't

We keep operational logs so we can fix bugs and stop abuse. They contain:

  • Tool used (e.g. "png-to-jpg"), file size, and processing time, for capacity planning
  • An anonymised session identifier, for rate limiting the free tier
  • Error stack traces, for debugging failed conversions

We do not log file contents, file names, file previews, thumbnails, or any of the transformed output.

Third parties we actually use

The complete list, and what each one sees:

  • Cloudflareedge CDN and DDoS protection. Sees request URLs and IP addresses, not file content.
  • Stripepayments for Pro subscribers only. Sees your billing details, not your files.
  • Brevotransactional email (receipts, password resets). Sees your email address, not your files.
  • Google Sign-Inoptional social login. If you use it, Google sees that you signed in, nothing about your files.

None of them receive the contents of a file you upload, and there is no ad network or data broker on that list. For what the site records about how it is used, and the cookies that involves, see the privacy policy.

GDPR & your data rights

iFormat is operated from India with servers in the EU (Helsinki, Finland), and we follow GDPR data-handling principles for every user regardless of location:

  • Right to accessemail us and we'll send you everything on your account.
  • Right to deleteyou can delete your account from your dashboard at any time. Everything associated goes with it.
  • Right to portabilityyour conversion history exports as JSON on request.
  • Right to objectno marketing emails without opt-in, and any opt-in is one-click to reverse.

Reporting a security issue

If you find a vulnerability, please email [email protected] with a proof-of-concept. We'll respond within one business day and won't send lawyers after researchers acting in good faith.

If any of the above stops being accurate, this page gets updated the same day.

Reviewed by