Privacy Policy

Last updated: March 15, 2026

The Short Version

Your images never leave your device. All image conversion happens entirely in your browser using the Canvas API and WebAssembly. We have zero access to your files.

Information We Collect

Account Information

If you create an account, we collect your email address for authentication and subscription management. We use magic links for sign-in, so we never store passwords.

Image Data

We do not collect, transmit, or store any images you convert. All image processing happens client-side in your browser. Your files are never uploaded to our servers.

Usage Data

Free-tier conversion counts are stored locally in your browser via localStorage. For logged-in users, we track daily conversion counts to enforce plan limits.

Cookies

We use a session cookie to keep you signed in. This cookie is httpOnly, secure, and contains only a session identifier.

Third-Party Services

• Cloudflare — Hosting and CDN. Subject to Cloudflare's Privacy Policy.
• Resend — Transactional email for magic link sign-in. Your email address is shared with Resend solely to deliver authentication emails.
• Polar.sh — Payment processing for Pro subscriptions. Payment information is handled entirely by Polar and is never stored on our servers.

Chrome Extension

The iLoveAVIF Chrome extension follows the same privacy principles as the website. Here is how data is handled in the extension:

Free Tier (Browser-Side Conversion)

All free-tier conversions happen entirely within the extension using WebAssembly. Your images are processed locally in an isolated offscreen document — they are never uploaded, transmitted, or accessible to us.

Pro Tier (API Conversion)

If you enter a Pro API key, conversions are sent to iloveavif.com/api/v1/convert over HTTPS for server-side processing. Images are processed in memory and immediately discarded — they are never stored, logged, or retained on our servers.

Data Stored by the Extension

The extension stores the following data locally on your device via chrome.storage.local:

• Settings — Default output format, quality preference, and notification preference.
• API key — Your Pro API key, if entered. Stored locally and only sent to iloveavif.com with conversion requests.
• Usage counter — A daily count of free-tier conversions, stored locally to enforce the 5/day limit. Reset daily. Not transmitted.

Permissions

The extension requests access to all URLs solely to fetch images that you explicitly right-click for conversion. No page content, browsing history, or personal data is read or collected.

Data Retention

Account data is retained as long as your account is active. You can request deletion of your account and all associated data by contacting us.

Contact

For privacy-related questions, contact us at privacy@iloveavif.com.