Privacy Policy

Last updated: September 14, 2026.

Who is responsible

PhotoAnvil is operated from Andorra by the operator identified in our Legal Notice. To contact the operator about your personal data, use our contact page.

Photo conversion

The tools are designed to process your selected photos locally, in your browser, without uploading them for conversion. No account is required to use the converter. This is separate from the connection records generated when you visit the website and from information you choose to send us by email.

The converter provides controls for the metadata included in the output. Files you download remain on your device until you remove them. Your browser may also cache website resources as part of loading the service.

Website connection records

The web service records technical request information, which can include IP addresses, timestamps, requested URLs, response status, referring pages and browser information. We use these records to operate and protect the service and investigate errors. Request records have also been used to count website activity.

We rely on our legitimate interest in maintaining a secure and reliable service for necessary connection records and troubleshooting. You may object to this processing under the conditions provided by applicable law.

The application's access and error logs are configured for daily rotation and deletion, keeping normal retention below thirty days. This limit concerns the application's operational logs; it is not a promise that all infrastructure records or provider backups are deleted at the same time. Hosting backups follow the provider's recovery and replacement cycle.

Contacting us by email

If you contact PhotoAnvil, we receive your email address, your message and the information you choose to include. We use this information to respond and follow up on your enquiry. Please avoid sending photos or sensitive information that is unnecessary for your request.

For ordinary enquiries, we rely on our legitimate interest in responding to people who contact us and following up on the same matter. For requests to exercise data protection rights, we process the information necessary to fulfil the applicable legal obligation. Providing contact information and enough detail about the request is necessary for us to respond; it is not a requirement for using the converter.

We retain ordinary PhotoAnvil enquiries while they are being handled and for six months after closure, to allow follow-up on the same matter. We review expired enquiries manually each month and remove them from the active mailbox within thirty days after that period ends. Where a complaint, security incident or legal obligation requires longer retention, we keep only the information necessary for that specific purpose. Deletion from the active mailbox does not immediately erase provider trash or backup copies. This mailbox retention period does not describe the separate retention of information processed by the assistant provider.

Service providers and assisted review

We use Hostinger for website hosting and backups, Gmail for correspondence and an OpenAI assistant to help identify and review correspondence relevant to PhotoAnvil. The operator decides how to respond; the assistant's authorised workflow does not send replies or change email messages. This assisted review does not independently make decisions with legal or similarly significant effects on you.

Relevant correspondence may appear in assistant conversation records as well as in Gmail. Deleting an email from Gmail does not automatically delete those records. Requests about information processed for PhotoAnvil can be made through our contact page.

Hosting, email and assistant services can involve processing in countries outside your own. Hostinger's data processing addendum describes its covered hosting services, sub-processors and relevant transfer safeguards. Google and OpenAI also describe their processing and retention in their own privacy information. These services should not be understood as storing every copy exclusively in Andorra or the European Union.

Provider privacy information: Hostinger, Google and OpenAI.

Advertising and your choices

Our JPG and PNG converters and our German HEIC-to-JPG page include Google AdSense code and Google's consent management service. These services connect your browser to Google and may process information such as your IP address, browser and device details. Ad availability depends on Google's approval and on the choices and rules applicable to each visitor.

Google and other advertising providers may use cookies, local storage and similar technologies for advertising, measurement and fraud prevention. Where consent is required, Google's consent message lets you consent, decline or manage individual options. Declining consent does not prevent you from using our photo converter. Depending on the applicable rules and your choices, no ad or a limited ad may be shown instead of a personalised ad.

Use Privacy and cookie settings at the bottom of a converter page to review or withdraw your consent when Google's consent service is available. The message also identifies the participating providers and their purposes. If the service cannot load, the link opens this policy; you can also manage stored website data through your browser settings. Withdrawing consent does not affect earlier lawful processing.

Advertising providers can process data outside your country. Their retention periods and international processing practices are described in their own privacy notices; the thirty-day limit for our application logs and six-month period for our ordinary email enquiries do not apply to their advertising records. Read how Google uses information on partner sites, Google's advertising information and Google's privacy policy. You can also manage advertising personalisation through Google's advertising settings.

Your data protection rights

Under applicable data protection law, you may request access to, correction or erasure of your personal data, restriction of processing or portability, and object to processing, subject to the relevant legal conditions. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Use our contact page to make a request. You do not need to send photographs to exercise these rights. We may ask for information proportionate to what is needed to verify and handle your request.

You may lodge a complaint with the Andorran Data Protection Agency or another competent supervisory authority where applicable.