Skip to main content

Privacy Policy

Effective date: March 20, 2026

ToJPG ("we", "us") operates the website tojpg.net. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Files You Upload

Files you upload are processed on our servers solely for the purpose of converting them to JPG format. We do not store, analyze, share, or sell your files. All uploaded and converted files are automatically and permanently deleted within 15 minutes of upload. No backups are made.

2. Analytics

We use Google Analytics 4 via Cloudflare Zaraz with Consent Mode v2. No analytics data is collected until you provide explicit consent through the cookie banner. If you consent, anonymized usage data (page views, referrer, device type) is collected to help us improve the service. We do not track individual users.

3. Cookies

  • Essential cookies: None. ToJPG functions without cookies.
  • Analytics cookies: Only set after you provide consent via the cookie banner. You can withdraw consent at any time by clearing your cookies.

4. Server Logs

Standard web server logs (IP address, user agent, request URL, timestamp) are retained for 7 days for security monitoring and debugging. Logs are not shared with third parties and are automatically purged after the retention period.

5. Data Processing & Storage

  • Server location: Falkenstein, Germany (Hetzner Online GmbH)
  • Transmission: All data is transmitted over HTTPS (TLS 1.3)
  • Storage: Files are stored temporarily on encrypted SSDs
  • CDN: Cloudflare (for static assets and DDoS protection)
  • No database: We do not maintain a database of user data. There are no user accounts, profiles, or persistent records.

6. Third-Party Services

Service Purpose Data shared
Cloudflare CDN, DNS, security IP address (per Cloudflare's privacy policy)
Google Analytics 4 Usage analytics (with consent) Anonymized page view data

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict processing
  • Object to processing
  • Data portability

Since ToJPG does not maintain user accounts and automatically deletes all files within 15 minutes, there is typically no personal data to manage. If you have questions or wish to exercise your rights, contact us at [email protected].

8. Children's Privacy

ToJPG is not directed at children under 16. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the service after changes constitutes acceptance of the revised policy.

10. Contact

For privacy-related questions or concerns: