Privacy and local processing
BulkConverter is designed to process source files in your browser without sending their contents to BulkConverter servers.
What happens to your files
Files selected inside a converter are held in browser memory for the current page. BulkConverter does not place file contents, file names or previews in localStorage or sessionStorage. The homepage file router only detects a file type and sends you to the appropriate tool; you select the file again there.
Tool-by-tool network behavior
| Workflow | File processing | External network activity |
|---|---|---|
| Coordinate CSV, data, image, PDF, geospatial and text tools | In-browser | No external requests are required for conversion. Version-pinned libraries are served from BulkConverter itself. |
| OCR | Recognition runs in-browser | The OCR engine, worker, WebAssembly core and English/Dutch language models are served from BulkConverter itself. The selected image is not uploaded. |
| Single-coordinate map | Coordinate calculation runs in-browser | OpenStreetMap tile servers receive normal map-tile requests, including IP address and requested map area. |
Browser storage
The current version does not store source files, file names or recent-tool history in localStorage or sessionStorage. Standard browser cache may retain static site assets such as JavaScript, CSS and images.
Analytics
The included analytics bridge makes no network requests. It emits only local browser events for broad actions such as opening a tool, starting a conversion or clicking download. It does not read or transmit file names, extensions, sizes, contents or coordinate values. No Google Tag Manager or Plausible forwarding is included in this deploy.
Third-party infrastructure
The site is delivered through Cloudflare. Like any web host or CDN, Cloudflare can process technical request information such as IP address, timestamp, user agent and requested URL for delivery and security. Check your Cloudflare dashboard before enabling Web Analytics or additional scripts, and update this notice if you enable them.
Security controls
The deploy includes HTTPS-only transport controls, clickjacking protection, restrictive browser permissions and a Content Security Policy that permits executable scripts only from BulkConverter itself.
Sensitive or regulated data
Browser-based processing reduces exposure but does not replace your employer's security rules, legal obligations or a formal data-processing assessment. Do not process regulated or highly confidential material unless your policy permits browser tools and the listed third-party network requests.
Contact and updates
For privacy or security questions, use the contact address published in security.txt. Last updated: 30 July 2026.