Cookie Policy
Version 1.1 — last updated 2026-08-27.
1. Our approach
We use as few cookies as possible. By default only essential cookies and browser storage are set. No advertising, marketing, profiling or cross-site tracking technology is installed, and we do not embed third-party ad pixels, social widgets or session-replay tools.
2. What a cookie is here
"Cookie" in this policy covers cookies and equivalent technologies: localStorage, sessionStorage and similar browser storage. We do not use device fingerprinting.
3. Full list
| Name | Category | Purpose | Lifetime | Set by |
|---|---|---|---|---|
| Authentication session | Essential | Keeps you signed in and authorises requests to your account data. | Until sign-out or token expiry | First party |
| Auth refresh token | Essential | Renews your session without asking you to sign in repeatedly. | Up to 30 days | First party |
| Converter preferences | Essential | Remembers your chosen output format and JPG quality. | Persistent until cleared | First party (localStorage) |
| Stripe fraud prevention | Essential | Set on checkout and billing-portal pages to detect fraudulent payments. | Set and controlled by Stripe | Third party (Stripe) |
| Aggregate usage counters | Analytics | Counts conversions and output formats. No filenames, image data or photo-derived identifiers. | Session only | First party |
4. Your photos are never stored
Image data is never written to cookies, localStorage, sessionStorage, IndexedDB or any service worker cache. It exists only in the tab's memory during conversion and is released when the page closes.
5. Consent
Essential cookies are strictly necessary to deliver a service you requested and do not require consent under the ePrivacy Directive or UK PECR. The analytics counters listed above are aggregate and non-identifying. If we ever add non-essential cookies we will add a consent banner with Essential, Analytics and Marketing categories, marketing will remain off unless you opt in, and rejecting will be as easy as accepting.
6. Managing cookies
Your browser can block or delete cookies and clear site storage. Blocking essential cookies will prevent sign-in and checkout from working, but the converter itself will still run. Questions: info@heicconvertfree.com.
7. Changes
We update this list whenever a cookie is added or removed and revise the date above.