Privacy Policy

1. Summary

• Your files stay on your device. All conversion happens inside your browser. No image, file name, or file content is ever uploaded, transmitted, or sent to us or to anyone else.
• The Extension collects nothing. No account, no sign-up, no personal data, no analytics, no telemetry, no crash reports, no advertising identifiers.
• The Extension requests no permissions and contains no networking code. Its own pages are blocked from making network requests by a Content Security Policy.
• The Site has its own, much smaller footprint, described in Section 7. It has no access to the files you convert and shares no storage with the Extension.
• We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

2. Who we are

The Services are provided by the developer of the Extension, who is the data controller responsible for the processing described in this Policy.

Contact for any privacy question or request: [email protected].

3. What the Extension does with your files

3.1 Conversion happens locally

When you drop a TIFF or PNG onto the Extension, the file is read by the page and decoded and encoded in Web Workers running on your own machine. The result is held in the page’s memory until you download it. There is no server component, no cloud processing, and no queue we can see.

Specifically, for every file you convert:

• the file’s bytes are read by the Extension’s page from the file you selected, and are not copied anywhere else;
• decoding and encoding happen in local Web Workers and WebAssembly modules bundled inside the Extension;
• the finished image is kept in memory only until you press its Download button (or take a batch as a ZIP), after which the browser object holding those bytes is released;
• nothing survives closing the Extension’s page or the browser tab it runs in.

The Extension does not read your file names into any report, does not build a history of what you converted, and keeps no log we can retrieve.

3.2 Handing a finished file to the browser

To save a converted file, the Extension creates a temporary in-browser object URL, clicks a link pointing at it, and lets Chrome save the file wherever you have told Chrome to save downloads. The Extension does not request the downloads permission, which means it cannot read your download history, cannot see whether a download succeeded, and cannot choose a location on your system. Where your files end up is between you and your browser.

3.3 Two preferences stored on your device

The Extension saves exactly two settings in your browser’s local storage for its own page:

• Theme — whether you chose light or dark mode;
• Compression level — the last compression slider position you selected.

These values live on your device, are not personal data, are not transmitted anywhere, and are not accessible to us. Clearing your browser data or removing the Extension deletes them. The Extension uses no other storage: no cookies, no chrome.storage, no IndexedDB, no caches of your files.

3.4 What the Extension does not collect

The Extension collects none of the following, because it has no code that could:

• personal identifiers such as name, email address, or account details;
• your browsing history, the pages you visit, or the tabs you have open;
• the content, names, sizes, or number of files you convert;
• location data, IP address, device fingerprints, or advertising or installation identifiers;
• usage analytics, conversion counts, feature interactions, or error and crash reports.

4. Permissions

The Extension declares no permissions at all. It does not ask for access to your browsing history, the content of pages you visit, your clipboard, your downloads, your bookmarks, or your file system, and it does not inject scripts or content scripts into any website you visit.

Clicking the Extension’s toolbar icon opens its own page in a new tab. Opening a tab this way requires no permission, which is precisely why the Extension can ship with an empty permission list. If a future version ever needs a permission, it will be requested explicitly, explained in the Extension’s listing, and reflected in an update to this Policy before it ships.

5. Network activity

The Extension makes no network requests. This is not merely a promise about our intentions — it is enforced by the Extension’s Content Security Policy, which sets connect-src 'none' and form-action 'none'. As a result, the Extension’s own pages are incapable of contacting a server, whether by fetch, WebSocket, image beacon, or a submitted form, even if a future bug or tampered build tried to.

The Extension therefore works fully offline. You can disconnect from the internet and every feature continues to function.

6. Legal bases and purposes

Where the EU or UK General Data Protection Regulation applies, our processing rests on these bases:

• Extension file processing — not applicable as controller processing, because the files never reach us. Your browser processes them on your device under your own control.
• Responding to your enquiries — our legitimate interest in answering you, or the steps needed to enter into a contract with you.

7. The Site: server logs, cookies and storage

This section concerns only the website at https://tiff.tools. It does not describe the Extension, which — as Section 3 explains — has no network access and no access to the Site’s cookies or its storage.

7.1 Server logs

Our hosting provider, Cloudflare, records standard access logs when you load a page: your IP address, the date and time, the page requested, the referring page, and your browser’s user-agent string. We use these to serve the Site, keep it available, and defend against abuse. They are retained for a short period and then deleted or aggregated.

7.2 Cookies and storage

The Site sets no cookies. It saves one setting in your browser’s local storage: the theme you chose, light or dark. That value lives on your device, is not personal data, is not transmitted anywhere, and is not accessible to us; clearing your browser data deletes it. It is stored to honour a choice you made, so there is nothing to consent to and no cookie settings to change.

There is no analytics service, no advertising, and no tracking of any kind.

You can still block or delete cookies in every major browser, and block third-party cookies entirely; the Site does not depend on either. Where your browser sends a legally recognised opt-out preference signal such as Do Not Track or Global Privacy Control, there is nothing on the Site for it to suppress.

No files are involved. The Site has no access to the images you convert in the Extension. The Extension’s page is a separate browser origin with no network access, and it shares no storage with the Site.

8. Sharing and disclosure

We do not sell, rent, or trade personal information. Concretely:

• Extension data: there is none to share. No third party receives anything from the Extension, because nothing leaves your device.
• Site data: our hosting provider processes it on our behalf and under contract, limited to the purposes in Section 7.
• Legal requirements: we may disclose Site data if we are legally required to, or if it is necessary to protect rights, safety, or the integrity of the Services. Because the Extension holds no data about you, no such request could produce your files.

We do not use your data — and could not, since we never receive it — to train machine-learning models, to determine creditworthiness, or for lending purposes.

9. Retention

• Converted files: held only in your browser’s memory until you download them or close the page. We retain nothing.
• Extension preferences: stored on your device until you clear browser data or remove the Extension.
• Site server logs: a short operational period, then deleted or aggregated.
• Correspondence: for as long as needed to handle your enquiry and meet our legal obligations.

10. International transfers

The Extension transfers nothing anywhere, so no international transfer arises from it. For the Site, our hosting provider may process data in countries outside your own, including the United States. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an equivalent adequacy mechanism.

11. Your rights

Depending on where you live, you may have some or all of the following rights:

• Access — to know what personal data we hold about you and to receive a copy.
• Rectification — to have inaccurate data corrected.
• Erasure — to have your data deleted.
• Restriction and objection — to limit or object to certain processing, including processing based on legitimate interests.
• Portability — to receive data you provided in a structured, machine-readable format.
• Withdraw consent — at any time, where processing rests on consent, without affecting processing already carried out.
• Non-discrimination — to exercise these rights without being denied service or charged differently (California residents).

Because the Extension collects no personal data, most such requests can only concern the Site’s server logs and our correspondence with you. To exercise any of these rights, write to [email protected]. We will respond within the period the applicable law requires. If you are in the EEA or the UK and are not satisfied with our answer, you may lodge a complaint with your national supervisory authority.

We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act as amended, and we have not done so in the preceding twelve months.

12. Children

The Services are general-purpose tools intended for a general audience and are not directed at children. We do not knowingly collect personal data from children. Because the Extension collects nothing from anyone, it collects nothing from children either. If you believe a child has provided personal data to us through the Site, contact us and we will delete it.

13. Security

The strongest protection here is structural: your files are never transmitted and never stored on a server, so there is no server-side copy of them to breach. We still take ordinary precautions for the Site — HTTPS in transit, access controls on our accounts, keeping dependencies current. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we can and do guarantee that we hold no copies of your converted images.

14. Chrome Web Store Limited Use disclosure

The Extension’s use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. In particular: the Extension uses no data for advertising; it does not transfer any data to third parties; it does not use or transfer data to determine creditworthiness or for lending purposes; and it collects no data beyond what is strictly necessary for its single purpose — converting images between TIFF and PNG on your device.

15. Changes to this Policy

We may update this Policy as the Services change. When we do, we will revise the “Last updated” date at the top of this page. If a change is material — for example, if a future version of the Extension were to begin collecting something it does not collect today — we will announce it on this page and in the Extension’s store listing before the change takes effect, so you can decide whether to keep using it.

16. Contact

Questions, requests, or complaints about privacy in the Services:

• Email: [email protected]
• Website: https://tiff.tools
• Developer: the developer of the Extension. Postal correspondence is available on request at the address above.