Privacy by architecture

Your files never leave your device.

FileGizmo performs file transformations in your browser. We do not receive, store, inspect, or intentionally transmit the contents of files you open in a tool.

Last updated

Local file processing

When you choose a file, code running on your device reads it and creates the result. There is no FileGizmo account, upload queue, processing server, or cloud file history. Downloads are created as temporary browser URLs.

Refreshing or closing the page clears whatever a tool was holding in memory. Two things deliberately outlive it, both on your device and neither ever sent anywhere: the editors keep a recovery draft for seven days so that a crash does not cost you your work, and sending a result from one tool into another keeps that file for up to a day so the second tool can pick it up. Any editor page can clear both, for that tool or for every tool. Your browser or operating system may also retain a downloaded result according to settings you control.

Website data

In your browser’s local storage FileGizmo keeps the light or dark theme, the list of tools you have opened recently, and the settings you last chose on a tool page, such as a page range or an output format. In your browser’s database it keeps the editor recovery drafts and tool-to-tool transfers described above. That is the complete list. None of it is sent anywhere, and all of it can be removed from any editor page or by clearing site data in your browser.

FileGizmo has no user accounts and does not sell personal information. It does not use advertising trackers or cross-site behavioral profiles.

Aggregate traffic measurement

FileGizmo runs no analytics. There is no Cloudflare Web Analytics tag, no Google Analytics, no product analytics, and no third-party script of any kind. We do not measure how many people visit, which tools they open, or how long they stay. This is not a promise you have to take on faith: open the browser Network panel and watch.

One tool is an exception, and it is the only one. Address to coordinates cannot work without asking a mapping service where a place is, so the addresses in the column you choose are sent to Geoapify, whose privacy practices are their own. The tool says so on its own page before you run it, no other tool sends anything anywhere, and your file itself is never sent even by that one: only the addresses it needs to look up. If this ever changes, it will be stated here first.

This has changed once, and here it is. Activate is not a tool and handles no files, but it does contact somebody: a licence key cannot be checked without asking the company that issued it, so pasting a key there sends the key and a device label — the word FileGizmo and your browser name — to Dodo Payments, who take our payments and whose privacy practices are their own. It sends nothing else, no tool page is permitted to make that request, and the answer is kept in your browser rather than anywhere we can read. If you never buy anything, nothing on this site ever contacts anyone except the one tool above.

Network and hosting data

Like any website, the hosting network may process ordinary request information needed to deliver a page, such as an IP address, requested URL, browser details, timestamp, and security signals. This is separate from tool processing: your selected file is not included in those page requests.

Third-party links

Links to documentation, research, or GitHub take you to services with their own privacy practices. FileGizmo does not control data you choose to provide on those sites.

How to verify the claim

Open your browser’s developer tools, select the Network panel, clear the list, and process a harmless test file. The tool may load code from FileGizmo’s own origin after your interaction, but it does not post the contents to a FileGizmo conversion endpoint.

Your file is sent to no oneOn every tool but address to coordinates, which asks a mapping service about the addresses you pick, nothing at all leaves this origin. This is a technical property of the product, not a promise to delete a server copy later.

Questions and changes

Privacy questions can be raised through the contact page. Material changes to these practices will update the date above before they take effect.