Privacy Policy

Last updated: March 21, 2026

MagicConverters (“we”, “us”, or “our”) operates the website magicconverters.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our file conversion services.

1. Information We Collect

When you use MagicConverters, we may collect the following information:

  • Account Information: Email address, name, and profile picture when you create an account or sign in via a third-party provider (Google, Facebook, or GitHub).
  • OAuth Data: When you sign in with an OAuth provider, we receive your public profile information (name, email, and profile picture). We never receive or store your password from any OAuth provider.
  • Usage Data: Pages visited, conversion types used, interaction patterns, referral URLs, and session duration.
  • Uploaded Files: Files you upload while signed in for conversion. These are temporarily stored, processed, and automatically deleted (see Section 5).
  • Device Information: Browser type and version, operating system, IP address, device type, and screen resolution.
  • Cookies and Tracking Data: Information collected through cookies, web beacons, and similar technologies (see Section 4).

2. How We Use Your Information

  • To provide, operate, and improve our file conversion services
  • To process your conversions and deliver results
  • To authenticate your identity via email/password or OAuth providers
  • To communicate service updates, respond to enquiries, and provide customer support
  • To detect and prevent fraud, abuse, and security threats
  • To serve relevant advertisements through Google AdSense (free tier users)
  • To analyse usage patterns and improve site performance
  • To comply with legal obligations

3. Third-Party Authentication (OAuth)

MagicConverters allows you to sign in using your existing accounts with the following providers:

We only request the minimum permissions needed (email and basic profile). We do not post on your behalf, access your contacts, or request any write permissions. You can revoke MagicConverters' access at any time through each provider's account settings.

4. Cookies, Advertising & Google AdSense

4.1 Cookies We Use

We use the following categories of cookies:

  • Essential Cookies: Required for the site to function (authentication tokens, session management, CSRF protection). These cannot be disabled.
  • Analytics Cookies: Google Analytics cookies (_ga, _gid) help us understand how visitors use the site. These are anonymised and do not identify you personally.
  • Advertising Cookies: Google AdSense and its partners use cookies to serve personalised advertisements based on your browsing history (see Section 4.2).

You can control or disable non-essential cookies through your browser settings at any time.

4.2 Google AdSense & the DoubleClick DART Cookie

MagicConverters uses Google AdSense to display advertisements on our website. Google AdSense is a third-party advertising service provided by Google LLC.

  • Google, as a third-party vendor, uses cookies — including the DoubleClick DART cookie — to serve ads to our users based on their visits to our site and other sites on the Internet.
  • The DART cookie enables Google and its partners to serve ads based on your visit to MagicConverters and/or other websites. This cookie does not track personal information such as your name, email address, or physical address.
  • You may opt out of the use of the DART cookie by visiting the Google Ads Settings page.
  • You can also opt out of personalised advertising by visiting www.aboutads.info/choices/ or optout.networkadvertising.org.

For more information about how Google uses data when you use our site, please visit How Google uses data when you use our partners' sites or apps.

4.3 Third-Party Advertising Partners

Some advertisers on our site may use cookies and web beacons. Each advertising partner has their own privacy policy. Our advertising partners may include:

  • Google AdSense / Google LLC

These third-party ad servers or ad networks use technology for the advertisements and links that appear on MagicConverters, which are sent directly to your browser. They automatically receive your IP address when this occurs. Other technologies (such as cookies, JavaScript, or web beacons) may also be used by the third-party ad networks to measure the effectiveness of their advertisements and/or to personalise the advertising content that you see.

MagicConverters has no access to or control over these cookies used by third-party advertisers. We recommend consulting the respective privacy policies of these third-party ad servers for more detailed information.

5. File Handling & Security

Your uploaded files are our top priority for security:

  • All files are encrypted during transfer (TLS 1.3) and at rest (AES-256)
  • Files are automatically deleted after 2 hours (24 hours for premium users)
  • We never access, read, analyse, or share your file contents
  • All uploads are scanned for malware using ClamAV before processing
  • Processing happens in isolated containers with no persistent storage
  • We do not use your files to train AI models or for any purpose beyond the requested conversion

6. Third-Party Services

We use the following third-party services that may process your data:

  • Google AdSense: Advertising on free tier (see Section 4.2)
  • Google Analytics: Anonymous usage analytics
  • Google, Facebook, GitHub: OAuth sign-in
  • Stripe: Payment processing for premium subscriptions (Stripe handles all payment data; we never see your full card number)
  • Google Cloud Platform: Infrastructure hosting and temporary file storage

7. Data Retention

  • Account data: Retained as long as your account is active, deleted within 30 days of account deletion
  • Uploaded files: Automatically deleted within 2 hours (free) or 24 hours (premium)
  • Conversion history: Metadata (file names, sizes, timestamps) retained for 90 days, then anonymised
  • Server logs: Retained for 30 days for security and debugging, then deleted

8. Your Rights Under GDPR (European Economic Area)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of Access: You can request a copy of all personal data we hold about you.
  • Right to Rectification: You can request that we correct any inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”): You can request that we delete all your personal data. We will comply within 30 days unless we are legally required to retain it.
  • Right to Restrict Processing: You can request that we limit how we process your data.
  • Right to Data Portability: You can request your data in a structured, machine-readable format (JSON or CSV).
  • Right to Object: You can object to the processing of your data for direct marketing or profiling purposes.
  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

Legal Basis for Processing: We process your data under the following legal bases: (a) your consent, (b) performance of a contract (providing conversion services), (c) legitimate interests (security, fraud prevention, service improvement), and (d) legal obligations.

To exercise any of these rights, email us at support@magicconverters.com. We will respond within 30 days. If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local Data Protection Authority.

9. Your Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you the following rights:

  • Right to Know: You can request details about the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You can request that we delete your personal information, subject to certain exceptions.
  • Right to Correct: You can request that we correct inaccurate personal information.
  • Right to Opt-Out of Sale/Sharing: You have the right to opt out of the “sale” or “sharing” of your personal information. MagicConverters does not sell your personal information. However, our use of Google AdSense may constitute “sharing” under the CCPA. You can opt out of personalised ads via the Google Ads Settings page.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

Categories of personal information we collect: Identifiers (name, email, IP address), Internet activity (pages visited, conversion types), and inferences drawn from usage data.

To exercise your CCPA rights, email support@magicconverters.com with the subject line “CCPA Request”. We will verify your identity and respond within 45 days.

10. Account & Data Deletion

You can delete your MagicConverters account at any time from your dashboard settings. When you delete your account:

  • All personal data and conversion history are permanently removed within 30 days
  • OAuth provider links (Google, Facebook, GitHub) are disconnected
  • Any remaining uploaded files are immediately deleted

To also revoke MagicConverters' access to your OAuth provider account, visit:

11. Children's Privacy

MagicConverters is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or through a notice on our website.

13. Contact Us

If you have any questions about this Privacy Policy, your data, or wish to exercise any of your rights, please contact us: