Privacy Policy

1. Privacy at a Glance

This website converts your images entirely locally in your browser. No image data is transmitted to any server. Your photos never leave your computer.

2. Data Controller

Bennet Jeutter Schönberger Str. 26 65760 Eschborn Germany

Email: contact@heic2pic.com

3. Hosting

This website is hosted on Cloudflare Pages. When you visit this website, Cloudflare may collect the following data in server log files: IP address, date and time of access, timezone difference to GMT, content of the request, HTTP status code, data volume transferred, referring website, browser, operating system, and screen resolution.

The legal basis for this data processing is Art. 6(1)(f) GDPR. Cloudflare's privacy policy can be found at: https://www.cloudflare.com/privacypolicy/

4. Image Processing

All image conversion happens entirely in your browser. Your HEIC files are processed using JavaScript (the heic2any library) on your local device. No images are uploaded to any server. Once you close the browser tab, all processed data is deleted.

5. External Resources / Content Delivery Networks

To provide the conversion functionality, JavaScript libraries are loaded from external Content Delivery Networks (CDNs). This only happens when you actively select a file for conversion (not on initial page load).

CDNs used:

  • jsDelivr (operated by Prospect One, Królewska 65a, 30-081 Kraków, Poland)
  • unpkg (fallback CDN, hosted in the USA)

Libraries loaded:

  • heic2any (HEIC conversion)
  • JSZip (ZIP creation)
  • jsPDF (PDF creation)

Data transmitted: When loading these libraries, your IP address, browser user agent, and referrer are necessarily transmitted to the respective CDN operator.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Loading these libraries is technically required to provide the core functionality of the tool.

Privacy policies of the CDN operators:

6. Cookies

This website uses cookies for the following purposes:

  • Technically necessary cookies: Required for basic website functionality.
  • Advertising cookies (with consent): If you consent, Google AdSense may set cookies for personalized advertising.

Cookie overview:

Cookie Provider Purpose Duration Type
__gads Google AdSense Measurement of ad interactions 13 months Third-party
__gpi Google AdSense Ad personalization 13 months Third-party
__eoi Google AdSense Ad performance 6 months Third-party
FCCDCF Google CMP Storage of your consent decision 13 months First-party

You can manage your cookie preferences at any time via the "Cookie Settings" link in the footer of our website or through our cookie consent banner.

7. Google AdSense

This website uses Google AdSense to display advertisements. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The processing company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense uses cookies and web beacons to serve ads based on your prior visits to this or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this site and/or other sites on the Internet.

Legal basis: Art. 6(1)(a) GDPR (consent). Advertising cookies are only loaded after you have given your explicit consent through our cookie consent mechanism (Google Consent Mode v2).

Data processing agreement: We have entered into a data processing agreement (DPA) with Google in accordance with Art. 28 GDPR. Google processes the data on our behalf and may not use it for its own purposes beyond the scope of the contract.

Data transfers to third countries: Google LLC is based in the USA. The transfer of personal data is facilitated under the EU-US Data Privacy Framework, for which Google LLC is certified.

You may opt out of personalized advertising by visiting Google Ads Settings.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw any given consent at any time. You can do so via the "Cookie Settings" link in the footer of our website or through the cookie consent banner. The lawfulness of processing carried out before the withdrawal remains unaffected.
  • Right regarding automated decision-making (Art. 22 GDPR): No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

To exercise these rights, please contact us by email at contact@heic2pic.com or via our contact form.

9. Data Retention

  • Cloudflare server logs: typically deleted automatically after 72 hours.
  • AdSense cookies: stored according to Google's retention policies (see cookie table above for individual cookie durations).
  • Local image processing: No server-side storage takes place. All image data is processed exclusively in your browser's memory and automatically deleted when you close the tab.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.

The supervisory authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI) (The Hessian Commissioner for Data Protection and Freedom of Information) Postfach 3163 65021 Wiesbaden, Germany Website: https://datenschutz.hessen.de

11. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in our practices or for other operational, legal, or regulatory reasons.

Last updated: February 2026