Transparency first
Privacy, cookies and local storage
Publication draft. The operator’s legal name, address and contact email must be completed and this notice reviewed before a public production launch.
Who operates this site?
Data controller: -. Postal address: -. Privacy requests: [email protected]. These are required publication details, not example data.
What happens to your files?
The selected file is opened by JavaScript, Canvas or WebAssembly in your browser. VeloFile’s application code does not upload file contents, file names, passwords, extracted text or converted results to our server. Files and generated download links remain in browser memory until you clear the workspace or leave the page. Your browser may keep a downloaded copy according to its own settings.
Technical providers and network requests
Cloudflare delivers the website and may process technical request data, such as an IP address, to serve and protect it. Heavy conversion libraries are downloaded on demand from jsDelivr; a request to that CDN can reveal your IP address and the site origin, but not the document you selected. These providers’ roles, transfer safeguards and retention periods must be checked by the operator before launch.
Cookies and browser storage
VeloFile’s application code does not set advertising cookies. It uses local storage for your theme (velofile_theme), chosen language (velofile_locale) and analytics choice (velofile_analytics_consent). A legacy velofile_pro value may remain on a device that used an earlier test build; the current free launch does not require a license. You can remove these values in browser settings. Cloudflare may use separate technical security mechanisms when serving the site.
Optional measurement
Analytics are off unless you actively allow them. If enabled by the operator and allowed by you, a Cloudflare Web Analytics beacon can measure page visits and performance. A separate VeloFile Worker can receive only the tool ID, result (open, success or error) and language. The Worker stores daily aggregate counts in D1 for up to 90 days; it does not store file names, file contents, cookies or a visitor ID. Network operators still receive technical connection data when a request is made. Do Not Track and Global Privacy Control are respected. You can change your choice at any time with “Privacy settings” in the footer; declining does not block conversions.
Legal basis, retention and your rights
Optional analytics rely on your consent. Technical delivery and security processing, and the legal basis for functional browser storage, require final assessment by the named operator. Browser preferences remain until you clear them. The 90-day D1 aggregate retention does not define Cloudflare’s or jsDelivr’s independent retention. Subject to applicable law, you may request information, access, correction, deletion, restriction or object to processing, withdraw consent and complain to your data-protection authority. Contact [email protected] for requests. This text is not a substitute for legal review.