Privacy Policy

Last updated: March 15, 2026

The Short Version

Your images never leave your device. All image conversion happens entirely in your browser using the Canvas API and WebAssembly. We have zero access to your files.

Information We Collect

Account Information

If you create an account, we collect your email address for authentication and billing. We use magic links for sign-in, so we never store passwords.

Image Data

We do not collect, transmit, or store any images you convert. All image processing happens client-side in your browser. Your files are never uploaded to our servers.

Usage Data

Free-tier conversion counts are stored locally in your browser via localStorage. For logged-in users, we track daily conversion counts to enforce plan limits.

Cookies

We use a session cookie to keep you signed in. This cookie is httpOnly, secure, and contains only a session identifier.

Free pages also carry advertising from Google AdSense. Google and its partners use cookies and similar technologies to serve and measure ads, and may use them to show ads based on your prior visits to this and other websites. You can opt out of personalized advertising in Google Ad Settings, or opt out of third-party cookies for personalized ads at aboutads.info. Ads are never shown to Pro users, and no ads appear on your dashboard or on any page where you sign in or pay.

Third-Party Services

• Cloudflare — Hosting and CDN. Subject to Cloudflare's Privacy Policy.
• Resend — Transactional email for magic link sign-in. Your email address is shared with Resend solely to deliver authentication emails.
• Polar.sh — Payment processing for Pro purchases. Payment information is handled entirely by Polar and is never stored on our servers.
• Google AdSense — Advertising on free pages. As a third-party vendor, Google uses cookies to serve ads. Google's use of advertising cookies is governed by its Advertising Policies. Advertisers never receive your images — image data is processed in your browser and is never sent to us or to any ad network.

Chrome Extension

The iLoveAVIF Chrome extension follows the same privacy principles as the website. Here is how data is handled in the extension:

Free Tier (Browser-Side Conversion)

All free-tier conversions happen entirely within the extension using WebAssembly. Your images are processed locally in an isolated offscreen document — they are never uploaded, transmitted, or accessible to us.

Pro Tier (API Conversion)

If you enter a Pro API key, conversions are sent to iloveavif.com/api/v1/convert over HTTPS for server-side processing. Images are processed in memory and immediately discarded — they are never stored, logged, or retained on our servers.

Data Stored by the Extension

The extension stores the following data locally on your device via chrome.storage.local:

• Settings — Default output format, quality preference, and notification preference.
• API key — Your Pro API key, if entered. Stored locally and only sent to iloveavif.com with conversion requests.
• Usage counter — A daily count of free-tier conversions, stored locally to enforce the 5/day limit. Reset daily. Not transmitted.

Permissions

The extension requests access to all URLs solely to fetch images that you explicitly right-click for conversion. No page content, browsing history, or personal data is read or collected.

Data Retention

Account data is retained as long as your account is active. You can request deletion of your account and all associated data by contacting us.

Contact

For privacy-related questions, contact us at privacy@iloveavif.com.