Privacy

No server sees this image. The PNG is decoded here, the matte is applied here, and the JPG is written straight to your downloads folder.

What happens to a file you open

• The browser hands this page a reference to the file. The first megabyte is read to walk the PNG chunks, and the rest is read to decode the pixels.
• Decoded pixels are held as an ImageBitmap and put nowhere else: not into local storage, not into session storage, not into IndexedDB. A build audit fails the release if any of those three names turns up in code that can reach an image buffer.
• The composite and the JPEG encode run on this machine, in a worker where the browser provides one and on the page itself where it does not. Either way the picture stays pixels in this tab.
• The result is a blob in memory. The download control hands that blob to the browser as a file.
• Nothing about the file — not its name, its size, its dimensions or its contents — is transmitted. There is no server behind this site and no endpoint that could accept one.
• Closing the tab discards all of it. There is no history of files, and nothing about a picture to clear.

What this browser keeps, and only if you ask

• Remember my settings is off unless you turn it on (Output tab). On, it keeps the recipe — quality, encoder, colour sampling, edge repair, DPI, file extension — and the matte colours you picked or typed, in this browser's local storage on this device. Never a picture, a file name or a colour read out of a picture. Turning it off deletes what was kept.
• So that the converter opens with no connection, a service worker saves a copy of this site's own pages, scripts, fonts and conversion worker in this browser's cache after a visit. That copy is the same for everybody and holds nothing about you or your files. Clearing this site's data in your browser removes it.

What is measured

The one measurement product this site uses is Cloudflare Web Analytics, which sets no cookie and keeps no identifier that follows you between sites. Its script is added by the page only when the address is convertpngtojpg.com itself — never on a preview copy, a local build or any other host — and the property belongs to this domain alone.

This domain's token for it has not been added to the code, so at the moment the script loads on no page at all and nothing about a visit is sent. When the token is added, the script will report a page view on convertpngtojpg.com: the page address, the referring page, the browser and device type, the country and the load time.

It never receives anything about a picture you open here: not the file, its name, its size, its dimensions, a colour sampled from it, or the settings you chose for it. Those exist only in this tab.

Advertising

There is no advertising on this site: no ad network script, no advertising cookie, and no space on the page sold to anyone.

What is not here

• No account and no sign-in. An email address is asked for in one place only, the contact form, and only if you decide to write.
• No image is stored, queued, cached on a server or retained for any period, because none reaches one.
• No cookie is set by this site or by its measurement.
• No file you compare against, and no screenshot you take a colour from, is kept: both are read in this tab and dropped.
• No cross-site identifier, and no roll-up with any other domain.

The contact form

The contact page is the single place where this site sends something, and it does so only when you press its send button: the name, email address and message you typed there, plus the name of this site, are posted to a Google Form the team reads. Opening that page asks Google for nothing, no PNG or setting travels with the message, and no other page here talks to Google or to anyone else.

Changes

If any of the above stops being true, this page changes on the same deploy as the code that made it stop being true. A privacy page that is updated afterwards has already been wrong for however long that took.