SECURITY
Security at ImageConvert
Security starts with HTTPS and browser isolation. ImageConvert keeps supported work local, validates source files before direct conversion, and labels heavier workflows before upload is enabled.
HTTPS and browser isolation
The public site is served over HTTPS with strict transport security on the live deployment. Browser-supported conversions use local APIs, temporary object URLs and downloaded outputs instead of public file URLs.
Direct converter pages validate the selected file type against the page source before conversion starts, so a renamed file is refused rather than silently exported under the wrong format.
Safer advanced formats
RAW, PSD, EXR, animation-preserving GIF/APNG and deeper PDF editing require stronger isolation and explicit limits before they can become upload-enabled workflows.
Report security issues or unsafe behavior to support@image-convert.tools. Include the page URL, browser, reproduction steps and whether a file was selected, but do not send sensitive source files by default.