ConvertArts 100% Free Cloud Studio
Sign In Join Free
Strict Ephemeral Storage Standard

Privacy Policy

Effective Date: January 1, 2026 • Last Updated: Today

At ConvertArts.com, architected by Alok Dey (alokdey.xyz), user confidentiality is treated as a core engineering specification. This Privacy Policy outlines how your data is handled, ephemeral payloads are processed, and files are permanently destroyed.

1

The 15-Minute Automated Storage Purge Protocol

ConvertArts.com operates on a strict zero-retention ephemeral data model. Unlike traditional cloud repositories:

  • Strict Auto-Destruction: All uploaded files (such as .zip archives, JPEG/PNG images) and their converted outputs are permanently erased from server disks exactly 15 minutes after completion.
  • Database Record Scrubbing: Database metadata, token pointers, and download records are destroyed alongside the binary disk purge via automated garbage collection daemons.
  • Zero Content Indexing: We never inspect, index, train machine learning models on, or create backups of your processed file payloads.
2

Information We Collect

We collect minimal information necessary to deliver and protect our utilities:

Account Information:

When you register, we store your Name, Email address, and Bcrypt password hash. For Google OAuth users, we store your public profile name, email, and avatar.

Fair-Use Logs:

To enforce daily limits for non-logged-in guest users and mitigate DDoS attempts, we record client IP addresses, browser User-Agent headers, and approximate city/country locations.

3

Google OAuth & Third-Party APIs

In accordance with the Google API Services User Data Policy:

  • We only request standard identity verification scopes (email and profile).
  • We do not request or access Google Drive, Gmail, or any other personal Google data.
  • User authentication data obtained via Google OAuth is never sold, shared, or leased to third-party advertising networks.
4

Cookies & Session Tracking

ConvertArts.com uses strictly necessary cookies:

  • Session Cookies: Maintain your active login status and user authentication context.
  • CSRF Security Tokens: Protect your browser interactions against Cross-Site Request Forgery exploits.
  • We do not deploy invasive third-party cross-site behavioral tracking cookies.
5

Security & Encryption Architecture

  • End-to-End SSL/TLS: All data transmissions between your browser and our servers are protected using 256-bit HTTPS encryption.
  • Execution Denial Sandboxing: Storage folders are configured with strict execution denial rules, preventing any arbitrary web-shell or script executions.
  • SQL Injection Shield: All database queries are executed strictly via parameterized PDO prepared statements.
6

Your Rights (CCPA / GDPR)

Regardless of your geographic location, you retain complete authority over your personal information:

  • You have the right to request permanent deletion of your account and activity logs at any time.
  • You have the right to request a full export of your registered account data.
Data Protection Officer:

For any inquiries regarding data protection or account deletion, reach out via our Help Desk or directly to developer Alok Dey at alokdey.xyz.