Privacy Policy

1. The part that matters most

We never receive your files. Every tool on this site — image conversion, compression, resizing, cropping, PDF merging, PDF rendering, QR generation, metadata reading — runs inside your own browser using WebAssembly and JavaScript. Your file is read from your disk into the memory of the browser tab, processed there, and written back to your disk as a download.

There is no upload endpoint. There is no processing queue. There is no storage bucket. Filestay is a set of static files served from a CDN; there is no application server that could receive a file even if we wanted one.

You do not have to take our word for it. Open your browser's developer tools, switch to the Network tab, and use any tool on the site. No request carrying your file will appear. The counter in the page header performs the same measurement continuously — it wraps every network API the page can use and counts binary payloads.

2. What we do collect

Analytics

We use Cloudflare Web Analytics, and nothing else. It sets no cookies, does not fingerprint visitors and cannot follow anyone from one site to another. What it records is which pages are visited, roughly where in the world the visitor is, which browser they use, where they arrived from, and how quickly the page loaded.

That is the entire extent of it. Nothing records which tool you opened, which file you chose, or what came out of it. There is no product analytics layer, no event stream and no per-visitor profile — so the question of whether a file name could leak into one never arises.

Advertising

This site is funded by advertising through Google AdSense. Google and its partners may use cookies and similar technologies to serve and measure ads, including personalised ads where you have consented.

You can review and change your ad personalisation settings at Google My Ad Center, and read how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.

The advertising code and your files never interact, because your files never leave the browser tab. An advertiser cannot see what you converted, because nobody can.

Server logs

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes connection metadata — IP address, user agent, requested URL — to serve pages and protect against abuse. See Cloudflare's privacy policy.

3. What stays on your device

Some features remember things locally. All of it lives in your browser's storage on your own device and is never transmitted:

• localStorage — how many files you have processed, how many megabytes you have saved, which tools you have used recently, which ones you have pinned, and your light/dark theme preference.
• sessionStorage — the breadcrumb of tools in your current chain.
• IndexedDB — a temporary holding slot used to pass a file from one tool to the next when you use "Continue with…". The record is deleted the moment the next tool picks it up, and expires after five minutes regardless.
• Cache Storage — the service worker's copy of the site and its WebAssembly codecs, so everything works offline.

Clearing your browser's site data for filestay.app removes all of it. There is no account, so there is nothing to delete on our side.

4. Cookies

Filestay sets no cookies of its own, and neither does its analytics. The cookies present on the site come from Google's advertising and, where applicable, the consent management platform that records your choice. The cookie policy lists them.

5. Your rights

Under the GDPR, UK GDPR and CCPA you have rights of access, correction, deletion, portability and objection over personal data held about you.

In practice we hold almost nothing to exercise those rights against: there are no accounts, no profiles and no uploaded content. For the advertising data processed by Google, use Google My Activity and the ad settings linked above, since Google is the controller for that data. For anything else, write to hello@filestay.app.

6. Children

Filestay is a general-purpose utility and is not directed at children under 13. We do not knowingly collect personal information from children.

7. Changes

If this policy changes materially, the date at the top of the page changes with it. Since we hold no email addresses, we cannot notify you individually — checking this page is the only mechanism available.

8. Contact

hello@filestay.app reaches a person. See the contact page for what we can and cannot help with.