Convert files without leaving your AI agent - Claude Code, Cursor, Gemini & more. Set up your agent

1 / 4
Conversion Tools

Privacy Policy

Last Updated: 24 September 2026

Your privacy is important to us. Conversion Tools, based in Germany, is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable laws. This Privacy Policy explains how we collect, use, and protect your personal information across our website, https://conversiontools.io, and related services.

Data Controller

We, Conversion Tools, are the data controller responsible for your personal data. You can reach us via our Contact Form.

Information We Collect

We collect information you provide directly and data automatically gathered when you use our services, as detailed below.

Personal Data You Provide

We may collect the following personal data when you interact with our website or services:

  • Name
  • Email address

This data is collected when you sign up for updates, contact us, or use our services (e.g., file conversion).

Automatically Collected Data

When you visit our website, we automatically collect:

  • IP address
  • Browser type and version
  • Pages visited, time and date of visits, time spent on pages
  • Device information and technical error details

This log data may not identify you alone but could be combined with other data to do so.

Cookies and Tracking Technologies

We use cookies and similar technologies (e.g., web beacons) to enhance your experience, analyze usage, and deliver ads. Cookies are small text files stored on your device. We use:

  • Session Cookies: Temporary, deleted after your visit.
  • Persistent Cookies: Remain until you delete them, recognizing you on return visits.

Storage that is strictly necessary to provide the service you ask for (for example, keeping you signed in and remembering your cookie choice) is used without consent. Everything else needs your consent first (GDPR Art. 6(1)(a), § 25(1) TDDDG, formerly TTDSG):

  • Analytics cookies (Google Analytics): set only after you click "Accept" in our cookie dialog, which appears on your first visit. "Reject" is offered right next to it with the same prominence, and until you choose, Google Analytics is not loaded at all. Your choice is kept in your browser's local storage and we ask again after 12 months.
  • Advertising (Google AdSense, Ezoic): signed-out visitors and visitors on the free plan see ads on converter pages. On those pages, consent for advertising is collected by the consent dialog of our advertising partner Ezoic, which follows the IAB Transparency & Consent Framework (TCF) and lists its partners and purposes. So that you are not asked twice, our own dialog does not appear on a page where that dialog is shown; the choices you make there for storing information on your device, measuring content performance and understanding audiences, and for Google as a partner, also decide whether Google Analytics may run. A choice made in our own dialog always takes precedence. Paid plans show no ads.
  • Embedded content (Zapier): loaded only when you click to show it (see Zapier below).

Our product analytics (PostHog) run without cookies and without storing anything on your device, so they do not require consent. You can change or withdraw your consent at any time with "Cookie settings" at the bottom of every page or ; on a converter page that shows ads, Cookie settings also reopens the advertising consent dialog. Withdrawing consent does not affect processing that took place before. You can also delete cookies in your browser settings.

Lawful Basis and Purposes of Processing

We process your personal data only when we have a lawful basis under GDPR Art. 6, such as:

  • Consent: For analytics cookies, advertising, embedded third-party content, marketing emails, or optional features (revocable anytime).
  • Contract: To provide file conversion services or respond to your inquiries.
  • Legitimate Interests: For cookieless product analytics, security, and service improvement, balanced against your rights.

We use your data for:

  • Personalizing your website experience
  • Communicating with you
  • Analytics and service enhancement (via PostHog, and with your consent Google Analytics and Ezoic)
  • Advertising, with your consent (via Google AdSense, Ezoic)
  • Internal records and administration
  • Security and fraud prevention

Third-Party Services

Google Analytics

With your consent, we use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyze website usage. Until you accept, the Google Analytics script is not loaded and no Google Analytics cookies are set. After you accept, it sets cookies ("_ga", "_ga_*") and collects data such as pages visited, device and browser details, and your IP address, which is transferred to Google servers (possibly in the US under the EU-US Data Privacy Framework). Its advertising features (Google signals, ad personalization) are switched off. Legal basis: your consent (GDPR Art. 6(1)(a), § 25(1) TDDDG). If you withdraw it via Cookie settings, we stop Google Analytics immediately and delete its cookies. You can also opt out via browser settings or Google's opt-out tool.

Google AdSense

Google AdSense (same provider) serves ads to signed-out and free-plan visitors on converter pages, using cookies and web beacons and collecting data like IP address and ad interactions. Consent is collected through our advertising partner's consent dialog (see Cookies and Tracking Technologies above). Data may transfer to the US. Opt out via the consent dialog, browser settings or Google's Ad Settings.

Ezoic

We use Ezoic (Ezoic Inc., 6023 Innovation Way, Carlsbad, CA 92009, USA) for ad optimization and analytics on the pages that show ads. Ezoic also provides the advertising consent dialog shown on those pages (IAB TCF), which stores your choices in your browser. Ezoic collects data (e.g., IP address, browsing behavior) via cookies, possibly transferred to the US under the EU-US Data Privacy Framework. Opt out via the consent dialog, Ezoic's privacy settings or browser controls.

PostHog

We use PostHog (PostHog Inc.) for product analytics. PostHog is configured in cookieless mode (no cookies are set for anonymous users) with EU data residency (eu.posthog.com). It collects usage data such as page views, conversion events, and feature interactions. IP addresses are not stored, and we do not record sessions. When you are signed in, these events are linked to your account so we can improve the service for you. Because it sets no cookies and stores nothing on your device, it runs without consent, based on our legitimate interest in understanding and improving our service (GDPR Art. 6(1)(f)). Learn more at PostHog's Privacy Policy.

Zapier

Some pages (for example our Automation page) offer Zapier's directory of ready-made workflows for Conversion Tools, provided by Zapier, Inc. (548 Market St. #62411, San Francisco, CA 94104-5401, USA). It is not loaded until you click "Show Zapier workflows". After that click, your browser connects to Zapier's servers, which receive your IP address and technical details about your browser. Zapier also sets its own cookies (for example, a visitor identifier) and records usage events of the embed. The directory also loads fonts from Google Fonts (Google Ireland Limited) through Zapier's stylesheet, so Google receives your IP address as well. Data may be transferred to the US; Zapier is certified under the EU-US Data Privacy Framework. Legal basis: your consent, given by the click (GDPR Art. 6(1)(a), § 25(1) TDDDG). It applies only to that page view and is not remembered; to stop, simply reload the page. Learn more at Zapier's Privacy Policy.

Share links

The share buttons on our pages are plain links. Nothing is sent to a social network until you click one, which then opens that network in a new tab under its own privacy policy.

Paddle

We use Paddle (Paddle.com Market Limited, 15 Briery Close, Great Oakley, Corby, Northamptonshire, NN18 8JG, United Kingdom) as our payment processor and merchant of record. When you purchase a subscription, Paddle collects payment information (e.g., name, email, billing address, payment method) to process transactions on our behalf. Paddle acts as the merchant of record for all purchases. Data may be processed in the UK and EU. Learn more at Paddle's Privacy Policy.

Disclosure to Third Parties

We may share your data with:

  • Affiliates or subsidiaries
  • Service providers (e.g., hosting, IT, analytics like Google/Ezoic/PostHog, payments like Paddle)
  • Providers of embedded content you choose to load (Zapier)
  • Employees and contractors
  • Legal authorities if required by law

All third parties are bound by GDPR-compliant agreements where applicable.

International Transfers

Data may be processed or stored outside the EU (e.g., US, UK) by us or our partners (Google, Ezoic, Paddle, and Zapier if you load its embed). PostHog data is stored within the EU. We ensure transfers comply with GDPR (e.g., EU-US Data Privacy Framework, UK Adequacy Decision, Standard Contractual Clauses), protecting your data per this policy.

Data Security

We use commercially reasonable measures to protect your data from loss, theft, or unauthorized access. However, no online system is 100% secure. We comply with GDPR breach notification rules if a breach occurs.

Data Retention

We retain your data only as long as necessary for the purposes outlined (e.g., active subscriptions, legal obligations). Post-use, we delete or anonymize it, except for legal, accounting, or statistical needs (e.g., tax records retained for 10 years per German law).

Your GDPR Rights

As an EU resident, you have these rights under GDPR:

  • Access: Request copies of your data (small fee may apply).
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion, subject to legal exceptions.
  • Restriction: Limit processing under certain conditions.
  • Objection: Object to processing (e.g., marketing), which we'll honor unless overridden by legitimate grounds.
  • Portability: Receive or transfer your data to another entity.

To exercise these rights, use our Contact Form. We'll respond within one month. For complaints, contact us or the German data protection authority (e.g., Berliner Beauftragte fur Datenschutz und Informationsfreiheit).

Changes to This Policy

We may update this policy to reflect legal or operational changes, posted here with reasonable notice where required (e.g., email for significant updates). New uses of your data will require consent if mandated by law.

Contact Us

For privacy questions, reach us via https://conversiontools.io/contact.