Your files are not our business.
There is no conversion upload service. Text, file bytes and names, previews, pipeline intermediates, and output remain in browser memory.
Network and storage
Pinned app and engine assets may download, but user content is never added to a request. IndexedDB stores only preset names, converter IDs, and non-sensitive options. Local storage keeps locale and theme; the service worker caches application assets.
Verify it
Open the browser Network panel while converting. You may see an engine download, but never a request containing the file, its name, or output.
Safety limits
The app warns above 250 MiB, bounds archive expansion, sanitizes paths, and cancels unsafe work instead of uploading it.