Skip to the converter

Privacy policy, in plain words.

The short version: for a conversion that runs in your browser, your file never leaves your device, so there is nothing for us to collect. The details, including the exceptions, are below.

Last updated

Files you convert in the browser

Conversions marked “on your device” are carried out by code running inside your browser tab. For these conversions:

  • The file is not uploaded. Its contents, its name and its size are not sent to toany or to anyone else.
  • The converted result is created in your browser’s memory and saved by you. We never receive it.
  • Files and results are gone when you close or reload the tab. We keep no history of what you converted.

To do this the page downloads conversion code (JavaScript and WebAssembly) from toany.io. That is a download to your browser, not an upload from it.

Server conversions

A few conversions cannot be done reliably inside a browser and run on our conversion server instead. They are labelled “server conversion” wherever they are offered, and nothing is uploaded until you confirm the upload for that file. This applies to: DOCX to EPUB, MOBI to EPUB, AZW3 to EPUB, ODT to DOCX, DOCX to ODT, RTF to DOCX, DOCX to RTF, DOCX to PDF, EPUB to PDF, DOC to PDF, ODT to PDF, RTF to PDF, PPTX to PDF, PPT to PDF, ODP to PDF, XLSX to PDF, XLS to PDF, ODS to PDF, DOC to DOCX, DOC to ODT, DOC to RTF, DOCX to DOC, ODT to DOC, ODT to RTF, RTF to DOC, RTF to ODT, PPT to PPTX, EPUB to MOBI, EPUB to AZW3, MOBI to PDF, AZW3 to PDF.

  • The file is sent over an encrypted (HTTPS) connection to toany’s conversion server.
  • It is processed automatically. Nobody looks at it and it is not used for anything other than producing your result.
  • The uploaded file and the converted result are deleted once the conversion has finished. They are not kept or shared.
  • The conversion software runs on our own server; your file is not passed to a third-party conversion service.

If you would rather not upload a file, cancel at the confirmation and nothing is sent.

To tell people from scripts, the first server conversion in a visit runs a check from Cloudflare Turnstile. It runs in the background and normally shows nothing on screen. Its code loads from Cloudflare only at that moment, never when you browse the site or convert in your browser. Cloudflare receives the usual request data, such as your IP address and browser details, and handles it under the Cloudflare Turnstile Privacy Addendum and Cloudflare’s privacy policy. Nothing about your file, not its name, size or type, is part of the check, and a successful check gives your browser a pass that is valid for 30 minutes.

Anonymous usage counters

When a conversion finishes, the page reports which kind of conversion it was, for example “HEIC to JPG, in the browser, 1”. We store these as daily totals per format pair so we know which converters matter. The report contains no file name, no file size, no content and no identifier for you, and the totals cannot be traced back to a person.

Server logs and abuse protection

Like any website, our server sees your IP address and browser type when your browser requests a page. To limit abuse, requests to our API endpoints are counted per IP address and per browser signature for about a minute; those counters then expire. We do not build profiles from this information.

Storage in your browser

toany has no accounts and sets no login cookies. Your browser may store small preferences locally, such as the light or dark theme, the target formats you last chose, and the option presets you save (their names, the settings and the target formats; never a file, a file name or a PDF password). These stay on your device and are not sent to us.

Analytics and advertising

toany is free and may be supported by advertising. We use Google Tag Manager to load measurement and advertising tags. These third-party services run their own code on the page, may set cookies or similar identifiers, and receive information such as your IP address, browser type and the pages you visit, under their own privacy policies.

They never receive your files. Advertising and analytics code has no access to the files you add: the conversion happens in your browser’s memory and file contents, names and sizes are not placed anywhere those tags can read them as page data.

What we do not do

  • We do not sell personal data.
  • We do not require an account, an email address or a payment.
  • We do not keep copies of files or results.

Children

toany is a general-purpose tool and is not directed at children. We do not knowingly collect personal information from anyone.

Changes

If how the product works changes, this page changes with it, and the date at the top is updated. The description here is meant to match what the software does; if you find a discrepancy, tell us.

Contact

toany.io is operated by TheRu Studio (theru.studio), based in Sydney, Australia. For privacy questions or requests, write to [email protected].