Tools

Privacy policy

Short version: your files are processed in your browser and never uploaded. The page only talks to pd00.com and to Cloudflare’s cookieless, anonymous page-view counter. No cookies, no ad trackers, no Google Analytics.

Your files

Every conversion, merge, split and compression on pd00.com runs in your web browser on your own device. The files you choose are read into the page’s memory, processed there, and offered back to you as downloads. They are not uploaded to pd00.com or to anyone else, and we have no way to see them. When you close or reload the tab, they are gone from the page.

To make this enforceable rather than a promise, every page is served with a Content-Security-Policy whose connect-src only allows two destinations: pd00.com itself and cloudflareinsights.com, Cloudflare’s cookieless, anonymous page-view counter. That counter receives the address of the page and timing data — never file contents, file names or personal data. The browser refuses connections to any other server.

How to verify that nothing is uploaded

  1. Open a converter page, for example HEIC to JPG, in Chrome, Edge or Firefox on a computer.
  2. Open the developer tools (F12, or Ctrl+Shift+I on Windows/Linux, Cmd+Option+I on a Mac) and choose the Network tab. Tick Preserve log.
  3. Convert a few files. You will see the page fetch its own JavaScript and the 1.4 MB decoder (libheif-….wasm) from pd00.com — downloads to you, not uploads from you. You may also see one small request to cloudflareinsights.com when the page loads: that is the anonymous page-view count, a few hundred bytes, sent before you have chosen any file. No request carries your file.
  4. For a stronger test, after the converter has loaded, switch the Network panel’s throttling to Offline (or turn off Wi-Fi) and convert more files. It keeps working, because nothing needs the network.
  5. Optionally, look at the response headers of the page itself: the Content-Security-Policy header lists connect-src 'self' https://cloudflareinsights.com — those are the only places the page can send anything.

What we do collect

  • Server logs. Like any website, the hosting network (Cloudflare) processes your IP address and browser type to deliver pages and protect against abuse. We do not keep our own access logs of page views.
  • Anonymous analytics. We use Cloudflare Web Analytics, which counts page views and measures load times without cookies, without fingerprinting and without tracking you across sites. It never sees file contents or file names.
  • Email. If you write to us, we keep your message to answer it.

We do not sell personal data, and we do not use cookies on this site.

Advertising

pd00 currently shows no ads. If we add advertising to keep the free tools free, this policy will be updated first, and visitors in regions that require it will be asked for consent before any advertising cookies are set.

Children

pd00 is a general-audience tool and does not knowingly collect personal information from children under 13.

Changes and contact

If this policy changes, the date below changes too. Questions: hello@pd00.com.

Last updated