Files are never uploaded — by design
FormatDrop performs all conversions entirely inside your browser. Our server has no file upload endpoint — it physically cannot receive your files. Open DevTools → Network tab and convert anything. You will see zero upload requests. This is an architectural guarantee, not a policy claim.
What we collect
- Email address: Only if you purchase a Pro subscription via Stripe. Used solely to send your magic login link and manage your subscription.
- Anonymous usage analytics: Google Analytics records page views and anonymous product events — that a conversion started or finished, that a form was submitted. Never file names, file contents, or anything that identifies you. No fingerprinting, no advertising profiles.
- Stripe payment data: Payment processing is handled entirely by Stripe. We never see or store your card details.
Cookies
If you purchase Pro, we set a single HttpOnly cookie (fd_token) containing a JWT that identifies you as a Pro user. This cookie expires in 30 days and is renewed automatically when you use your magic link.
Google Analytics sets first-party cookies (_ga and _ga_*) so we can count returning visitors. They hold a random identifier — not your name, not your email, and nothing about your files.
We do not use advertising cookies, we do not fingerprint your device, and we never sell or share your data with ad networks.
Data retention
Pro subscription status is stored in Redis with a 400-day TTL. If you cancel, it is deleted. Email addresses associated with expired subscriptions are automatically purged.
Questions?
Reach us at hi@formatdrop.com or via the contact page.