Your Files Stay Yours

We never look at your files

Most tools on FileCast work right inside your browser. Your file never leaves your device — it's converted on your computer, not on our servers.

For those tools nothing is uploaded and nothing is sent over the internet. When you close the tab, it's like the conversion never happened. The few tools that do need our server are covered in the next section — and even there, we never look at what you send.

Look for the Local badge on a tool card — it means the tool works entirely on your device.

Some tools need a quick handoff

A few conversions (like Word to PDF) need more power than a browser can provide. For these tools, your file takes a short round trip:

• Your file is sent securely to our server
• We convert it and send it back to you
• Your file is deleted instantly — we don't keep a copy

We never look at, save, or share what you send. The entire process takes seconds, and nothing is left behind.

Look for the Cloud badge on a tool card — it means the tool uses a secure server round trip: your file is encrypted in transit, converted, and deleted immediately.

What we promise

• We never store your files — not the content, not the filename, not the file itself
• We never look at what you convert
• We never require an account — every tool works without signing in
• We never sell your data — not to advertisers, not to anyone.
• Account data (if you sign in) is used only to power your history, favorites, and preferences — nothing else
• We never block features behind a paywall

Your files are NEVER stored, logged, or accessible to us — whether you have an account or not. Account features only track which tools you used, not what you converted.

Your Account Data

• What we collect: your name and email from Google, only when you choose to sign in.
• What we store: your conversion history (tool used, file size, date — not file content or filenames), your favorites, and your preferences.
• What we DON'T store: your files, file content, file names, file metadata, or IP addresses. (A rating-dedup hash — derived from your IP with a daily-rotating salt, not your IP itself — is stored alongside your vote to prevent duplicate voting; see below.)
• How long: history is kept for 30 days, then automatically deleted; the rest of your account data is kept until you delete your account.
• Who can access it: only you. We don't share, sell, or use your data for advertising.
• Email: used only for optional "new tools" updates if you opt in — no marketing, no third parties.
• Deletion: delete your account and ALL data at any time from your account page — immediate and permanent.
• Google sign-in: we receive your name, email, and avatar URL from Google. We don't access your Drive, contacts, or any other Google data.

Data We Collect From Everyone (No Account Needed)

• Anonymous conversion counters (no personal data).
• Anonymous ratings (yes/no, deduplicated via a daily-rotating IP hash stored with the vote — not your IP address, and not personally identifying).
• Optional written feedback if you tell us what went wrong after a "No" rating (the text you type, your browser's user-agent string, and the tool and time — not linked to any account, vote, or IP address). Please don't include personal information in it; we can't act on anything typed there as a support request or data request — use the contact form for that.
• Contact-page messages (subject, message body, your browser's user-agent string, and — only if you choose to provide one — a reply email; linked to your account if you're signed in when you send it). Kept so we can read and respond, not auto-deleted like the data below.
• Client-side error logs (tool name, error type, browser — no personal data).
• Google Analytics, if enabled — standard anonymous usage analytics.
• Cloudflare Web Analytics — your IP address, browser/device info, and the page you visited, used only to measure aggregate traffic. Sets no cookie and creates no persistent identifier for your visit, so it isn't behind the cookie consent banner below; see "Third-Party Services" for the lawful basis.

Cookies We Use

A cookie banner appears on your first visit if any cookie-setting feature below is active. Nothing non-essential is set until you click Accept — your choice is remembered in your browser's local storage, not a cookie, so declining doesn't itself set anything.

Your Privacy Rights

If you're in the EU, UK, or a similar jurisdiction, GDPR gives you rights over your personal data. If you're a California resident, CCPA gives you comparable rights. Either way, you can:

• Access the data we hold about you (see "Your Account Data" above — there isn't much else).
• Correct inaccurate data, directly from your account page for most fields.
• Delete your data ("right to erasure") — the account page's delete option removes everything immediately and permanently.
• Export your data ("data portability") — email us and we'll send what we hold.
• Object to or opt out of analytics and ad cookies, via the consent banner or by declining it.
• Lodge a complaint with your local data protection supervisory authority if you believe we've mishandled your data.

Lawful basis: account data is processed on the basis of your consent (signing in is opt-in) and to perform the service you asked for (converting files, keeping your history). Anonymous usage analytics and, once enabled, ad personalization run only after you consent via the cookie banner. Cloudflare Web Analytics is the one exception: it sets no cookie and creates no persistent visitor identifier, so we rely on legitimate interest — understanding aggregate site traffic and performance — rather than consent, per GDPR Art. 6(1)(f).

Do Not Sell or Share My Personal Information (CCPA): we don't sell or share personal information with third parties for money or other value, and never have. There's nothing to opt out of on that front — it simply doesn't happen.

International data transfers: Google (Sign-in, Analytics, and AdSense), Sentry (error monitoring), and Cloudflare (Web Analytics, plus the CDN/security layer every request already passes through) are US-based processors. Where data crosses into the US, it does so under those providers' own standard contractual safeguards (e.g. Google's, Sentry's, and Cloudflare's respective data processing terms) — we don't operate any infrastructure of our own outside the region our server is hosted in.

Children's Privacy

FileCast isn't directed at children and isn't intended for use by anyone under 13. We don't knowingly collect personal data from children under 13. If you believe a child has created an account or otherwise provided us personal data, contact us and we'll delete it.

Third-Party Services

We use a small number of third-party services, each limited to a specific job. None of them ever receives your file content.

• Google Sign-In — optional authentication. See Google's Privacy Policy.
• Google Analytics (GA4) — anonymous usage analytics, only after cookie consent. See Google's Privacy Policy.
• Google AdSense — advertising, once enabled on the site, only after cookie consent. Ads may be personalized based on your activity across the web; see how Google uses information from sites that use its services and your Google Ads Settings to control ad personalization.
• Sentry — error monitoring, so we notice and fix bugs. Captures things like error messages, browser/device info, and the tool you were using — never file names or file content. See Sentry's Privacy Policy.
• Cloudflare Web Analytics — aggregate traffic measurement (page views, load times). Sets no cookie and doesn't fingerprint or track you across sites, so it runs without cookie consent, on the basis of our legitimate interest in understanding site traffic (see "Your Privacy Rights" above). See Cloudflare's Privacy Policy.
• Gotenberg / Ghostscript — run on our own server for server-side conversions. Not third-party services; nothing you send them leaves our infrastructure, and files are deleted immediately after conversion.

Security Measures

All traffic to and from FileCast is encrypted (HTTPS). Server-side conversions run in isolated containers and are deleted immediately afterward. Sign-in cookies are httpOnly and marked Secure in production, so they're inaccessible to page scripts and never sent over an unencrypted connection. Account deletion is immediate and permanent, not a soft-delete.

Data Controller & Contact

FileCast is operated by an individual, not a registered company. For any privacy question, data request, or complaint, contact [email protected] — that inbox is the single point of contact for all data controller responsibilities under GDPR and CCPA.

How we keep FileCast free

FileCast is free because we show (or will show) ads. We also use basic analytics to understand which tools people find useful, so we can make them better. None of this is connected to your files in any way.

If you use an ad blocker, everything still works exactly the same. We'll never restrict features because of it.

Changes to This Policy

If we materially change how we handle your data, we'll update this page and the effective date above. Continued use of the service after a change means you accept the update.

Questions?

If anything about how we handle your files is unclear, reach out. We'd rather explain too much than leave you guessing.