Security

Formatly converts files in your browser. Images are not uploaded to our servers for conversion. There is no account system and no server-side conversion queue. Processing happens locally using browser APIs and WebAssembly codecs when needed.

That architecture is intentional. Many online converters require an upload so a remote machine can re-encode the file. Formatly keeps the bytes on the device that already holds them — useful for private photos, screenshots with personal data, and work documents you do not want to send to a third-party pipeline.

You can verify it. Open DevTools, switch to Network, then convert a file. Formatly does not POST the image (or a multipart upload) to a conversion API. Decode and encode run in this tab. You may see a script chunk for a codec — for HEIC, the WebAssembly decoder loads after you choose a file, not as an upload of the photo itself.

You can strip EXIF and GPS metadata on export, or keep it. Output quality, resize, and related options stay under your control on the image converter.

For how we describe file handling in product copy, see privacy.