Security & privacy
Last updated: July 2026
ConvertCanvas is safe because it never uploads your files. Every conversion runs inside your own browser using WebAssembly — the image never travels over the network, so there is nothing to intercept and no server-side copy to leak. This page explains the model and shows you how to verify it in under a minute.
The security model in one sentence
Your browser is the converter: it decodes and re-encodes the image locally, and only an anonymous "a conversion happened" event is ever sent to us — never image data.
Why this is more private than upload-based converters
| Typical online converter | ConvertCanvas | |
|---|---|---|
| Where conversion runs | Company's server | Your device |
| Files uploaded | Yes | No — never |
| Server-side copy | Yes (retention varies) | None exists |
| Exposure in transit | Possible | Nothing is transmitted |
| Works offline | No | Yes, after first load |
Verify it yourself in 3 steps
- Open your browser's developer tools (press F12) and select the Network tab.
- Convert any photo on ConvertCanvas.
- Inspect the requests — no image upload appears, only a tiny anonymous event log.
Common security questions
Is ConvertCanvas safe to use?
Yes. ConvertCanvas converts images entirely inside your browser using WebAssembly, so your files are never uploaded to any server. There is nothing to intercept in transit and no copy stored anywhere — the conversion happens on your own device.
Do my photos get uploaded to a server?
No. Zero image bytes leave your device. You can verify this yourself: open your browser's developer tools, go to the Network tab, and convert a photo — you will see no image data in any request.
Can ConvertCanvas staff see my images?
No. Because images are never transmitted to us, we have no technical ability to view, store, or recover them. We could not access your photos even if compelled to.
Is it safe to convert sensitive documents or ID photos?
Yes — this is exactly the case on-device conversion is built for. Sensitive scans (passports, IDs, medical images) never travel over the network, unlike with typical upload-based converters.
What happens to EXIF and GPS metadata?
All hidden metadata, including GPS location and camera details, is stripped during conversion. Your converted files carry no location data.
Does anything persist after I close the tab?
No. Your images live only in the tab's memory while you work. Closing the tab clears everything; nothing is written to a server and no image is cached.
For the underlying mechanics see how it works; for what we log see the privacy policy.