Is it safe to upload files to an online converter?
What actually happens to a file you upload to a conversion site, what the terms usually permit, and how to convert something you cannot risk sending.
Last updated
The honest answer
For a holiday photo, uploading to a well-known converter is almost certainly fine. The established services delete files within hours, use encrypted connections, and have no interest in your holiday. Treating every upload as a catastrophe is not useful advice.
But "almost certainly fine" is doing a lot of work in that sentence, and for some files it is not good enough.
What you are actually agreeing to
When you upload a file to a conversion service, you typically grant it permission to store and process that file for a period, on infrastructure you cannot inspect, under a jurisdiction you may not have considered. The file is decrypted at the server in order to be converted — that is unavoidable, because converting an encrypted file is not possible.
None of that is sinister. It is simply the mechanics of the arrangement, and it means the question is never "do I trust this company" so much as "am I allowed to hand this file to anyone at all".
When the upload is the problem
There is a category of file where the exposure is not theoretical:
- Client work under a non-disclosure agreement, where sharing with a third party is the breach
- Medical images and records, where handling is regulated rather than merely advisable
- Legal documents, contracts and anything covered by privilege
- Unreleased film, music or product footage, where a leak has commercial value
- Personal identification — passports, licences, bank statements
- Anything belonging to somebody who did not agree to it being uploaded
For these, no deletion policy helps. The moment the file left your machine, the thing you were supposed to prevent had already happened.
How to convert something you cannot upload
Three options, in order of how much trouble they are. Install real software — FFmpeg, HandBrake or ImageMagick — which is the correct answer if you convert things often. Use a tool built into your operating system, which handles simple image conversions and little else. Or use a converter that does the work in your browser, which is what this site is: the file is read from your disk, converted in the page, and written back, without a network request carrying it anywhere.
Questions
Are online file converters safe to use?
It depends entirely on what happens to the file after you upload it, and you generally cannot verify that. Most reputable converters delete files after a few hours. The risk is not usually malice — it is that a copy of your file existed on a machine you do not control, covered by terms you did not read.
What do converter sites do with my files?
Reputable ones convert and delete, usually within one to twenty-four hours. Their terms commonly grant a licence to process and store the file for that period. Less reputable ones say very little, and free converters funded by advertising have a business reason to know what you convert.
When does it actually matter?
When the file is somebody else’s to protect: client work under an NDA, medical or legal records, unreleased material, anything covered by GDPR or HIPAA. In those cases the upload itself can be the breach, regardless of what happens afterwards.