Privacy policy

Files you drop on saveas.now are read, converted and saved by your own browser, on your own device. They are not uploaded to us or to anyone else. We do not receive the file, its name, its contents, or a fingerprint of it, and we cannot recover any of these afterwards. You can confirm this in your browser's Network tab during a conversion.

Tables you open in the Data workspace are kept in your browser's private storage on your device so they are still there on your next visit. “Clear everything” in the workspace removes them. Uninstalling the site or clearing site data in your browser removes them too.

• Usage counts. When a conversion starts or finishes, or a limit is reached, the site records an event with the kind of file (for example “photo” or “spreadsheet”), a size bracket (for example “under 1 MB”), the conversion chosen, whether it succeeded, how long it took, and which browser features were available. The format of these events is fixed and cannot carry a file name, a value from a spreadsheet, or a fingerprint. We use them to see which converters matter and how big real files are.
• Your email address, if you unlock with it. We use it to send the sign-in link and to know which license is yours. We do not send newsletters unless you ask for them.
• Your unlocked browsers. For each browser you unlock we keep a sign-in token, a coarse label such as “Chrome on macOS”, and when it was last used, so you can see and sign out your devices from the account page.
• Page views and web performance through PostHog, an analytics service. We turn off its automatic capture of clicks and typed text and its session recordings, so it cannot see file names on screen. If you have unlocked, your page views, checkouts and purchases are tied to your account, with your email address as the label, so we can see how people go from trying the site to paying for it and what they use. Your IP address is used once to guess your country and is then discarded by PostHog.
• Server logs for a short time, to keep the site running and to spot abuse. They contain request paths and IP addresses, never file contents.
• Payment records, once paid plans open: which plan you bought, when, and a reference to the transaction at our payment provider. Card and bank details go to the provider, Dodo Payments, and never to us.

If you unlock, one cookie holds your sign-in for this browser. Your license is also cached in the browser's local storage so the site works offline. Analytics uses local storage rather than cookies. There are no advertising cookies and no third-party trackers. The contact, feedback and unlock forms are guarded by Google reCAPTCHA, which runs its own script on those three pages and may set a Google cookie there; it is never loaded on a converter page.

• Resend delivers the sign-in emails, so it sees your address and the link.
• PostHog stores the anonymous usage events and page views described above.
• Google reCAPTCHA checks that the contact, feedback and unlock forms are used by people, and sees your IP address and browser details on those pages only.
• Dodo Payments handles payments as the merchant of record, once paid plans open, and sees what it needs to take a payment.

None of them receive your files, because we never have them. We do not sell or share personal data with anyone else, and we do not use it for advertising.

• Your account, email and license stay until you ask us to delete them. Ask through the contact page, giving the address on the account, and it is removed within a few days, along with your unlocked browsers.
• A sign-in for a browser expires after a year of not being used.
• Usage counts are anonymous by design and are kept for product statistics.
• Database backups are encrypted and kept for a limited period so the service can be restored after a failure.

You can ask what we hold about you, ask for it to be corrected or deleted, or object to how it is used, through the contact page. Since we hold so little, the answer is usually the list above. If you are in a place that gives you the right to complain to a data-protection authority, you can do that too.

The site is not aimed at children under 16, and we do not knowingly collect their details. If you think a child has unlocked with an email, tell us and we will remove it.

When this policy changes, the date at the top changes with it. A change that affects what we collect is announced on the site before it takes effect.

See also the terms of service.