Your Privacy, Simply Explained

Information we collect

We collect only the minimum information needed to operate the service:

• Account information— Your email address and name when you create an account. We use this to authenticate you and send service-related communications.
• Conversion metadata— For Pro and Business subscribers, we log the file name, file size, input format, output format, and timestamp of each conversion. This powers your conversion history. We never log file contents.
• Billing information— Processed entirely by Stripe. We store only your Stripe customer ID and subscription status. We never see or store your card number.
• Usage analytics— Aggregate, anonymized data about which converters are used and general traffic patterns. No personally identifiable information is included.

What we never collect

• — The contents of any file you convert
• — Any binary data from your device
• — Browsing history outside of HarborConvert
• — Location data beyond country-level (from your IP address, used only for abuse prevention)

This is not a policy choice we could walk back — it is an architectural constraint. Your file is opened in your browser, processed in your browser's memory, and the result is written directly to your downloads folder. No network request containing file data is ever made.

Cookies and local storage

We use cookies and browser storage for the following purposes:

• Authentication— A session cookie issued by Supabase to keep you signed in. This is essential and cannot be disabled without logging out.
• Preferences— We store lightweight UI preferences (e.g., converter settings) in localStorage. This data never leaves your device.
• Advertising— Free-tier users may see ads served by Google AdSense, which sets its own cookies to personalize ads. See our Cookie Policy for details and opt-out options.

Third-party services

• Supabase— Hosts our database and authentication. Your account data is stored in Supabase's infrastructure. See Supabase's privacy policy for their data handling practices.
• Stripe— Processes subscription payments. Stripe is PCI-DSS compliant and subject to their own privacy policy.
• Vercel— Hosts our web application. Vercel may log IP addresses and request metadata in accordance with their privacy policy.
• Google AdSense— Displays ads to free-tier users. Google may use cookies to personalize ads. You can opt out via Google's ad settings.

Your rights (GDPR & CCPA)

Depending on where you live, you may have the following rights regarding your personal data:

• — Access: Request a copy of the personal data we hold about you
• — Correction: Ask us to correct inaccurate data
• — Deletion: Request that we delete your account and associated data
• — Portability: Receive your data in a machine-readable format
• — Opt-out: Opt out of analytics and advertising cookies at any time

To exercise any of these rights, email us at privacy@harborconvert.com. We will respond within 30 days.

Data retention

Account data is retained for as long as your account is active. Conversion history metadata is retained for 90 days on Pro plans and 365 days on Business plans. When you delete your account, all associated data is permanently deleted within 30 days.

Children's privacy

HarborConvert is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email to registered users. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

Contact

Questions about this privacy policy? Email us at privacy@harborconvert.com.