Last updated: March 19, 2026
This policy explains what data HEICcon collects, why, and what happens with it. The site is operated by AppsYogi.
Short version: your image files never leave your browser. We use Google Analytics to count visitors. That's most of it.
What we don't collect
Start here because it matters most.
- Your image files — all conversion happens in your browser using WebAssembly and the Canvas API. Nothing is sent to our servers. There is no upload endpoint. We literally cannot receive your files.
- Converted output — converted files are created on your device and downloaded directly. We never see them.
- Account data — there are no accounts. No usernames, no passwords, no profiles.
What we do collect
Google Analytics 4
We use Google Analytics (GA4) to understand how people use the site — which tools get used most, how long sessions last, what countries visitors come from, and what devices and browsers they use. GA4 collects this through cookies and assigns a randomly generated client identifier. It does not collect your name, email, or anything personally identifiable through our implementation.
Google's privacy policy: policies.google.com/privacy. You can opt out via the Google Analytics Opt-out Browser Add-on.
Google Fonts
The site loads fonts from Google Fonts CDN. When your browser requests these files, Google receives your IP address and standard browser metadata. See Google Fonts privacy FAQ.
Server logs
Every page request generates a standard server log entry — your IP address, the URL requested, browser user-agent, and HTTP referrer. These exist for debugging and security. We don't use them to build profiles or track individual users.
URL and Dropbox imports
If you import a file by URL or from Dropbox, that URL passes through our server proxy to fetch the file cross-origin. The file streams directly to your browser without being stored. The URL appears in the server log for that request.
Google Drive imports
Google Drive imports run the OAuth flow entirely in your browser. We receive a temporary token to read the specific file you selected. We don't store this token and don't send it to our server.
Cookies
| Cookie / Storage | Purpose | Type | Duration |
|---|---|---|---|
| _ga, _ga_* | Google Analytics visitor identification | Analytics | 2 years |
| theme (localStorage) | Remembers your light/dark mode preference | Functional | Until cleared |
Data sharing
We don't sell your data. The only third parties that receive any information are Google (via Analytics) and Google Fonts, as described above.
Data retention
Google Analytics data is retained for 14 months (the GA4 default). We don't maintain a separate database of visitor information.
Your rights
Depending on where you live, you may have the right to access, delete, or export data we hold about you. Given we store almost nothing directly, there won't be much — but email us and we'll handle it. If you're in the EU/EEA (GDPR), UK, or California (CCPA), these rights apply.
Changes to this policy
If we change how we handle data, we'll update this page and the date at the top.
Contact
Privacy questions or data requests: hello@appsyogi.com