SECURITY
Security at ImageConvert
Security starts with HTTPS and browser isolation. ImageConvert keeps supported work local, validates source files before direct conversion, and labels heavier workflows before upload is enabled.
HTTPS and browser isolation
The public site is served over HTTPS with strict transport security on the live deployment. Browser-supported conversions use local APIs, temporary object URLs and downloaded outputs instead of public file URLs.
Direct converter pages validate the selected file type against the page source before conversion starts, so a renamed file is refused rather than silently exported under the wrong format.
Safer advanced formats
Pentax K-x PEF 12-bit 3:2 and Samsung NX200 SRW 12-bit 3:2 are additionally qualified for the same four isolated server exports, up to 64 MiB and 24 MP. Only those full-sensor models/variants; no embedded-preview fallback. Sigma DP1 X3F TRUE three-plane HI is additionally qualified with a separate isolated DP1-only LibRaw fork and complete prevalidation; other Sigma models and variants are refused. Named CR2/NEF/ARW/camera DNG/CR3/ORF/RW2/RAF to JPG/JPEG, PNG and WEBP use an isolated non-root LibRaw server worker and temporary request storage. Only the disclosed camera models and variants are qualified. Other RAW inputs remain guide-only with no upload. Rendered LinearRaw DNG output is a separate writer, not camera input. No embedded JPEG fallback or browser RAW decoding. Unsupported camera variants, unproven native professional outputs and other guide-only routes stay disabled until route-specific proof exists.
Report security issues or unsafe behavior via the /contact/ page. Include the page URL, browser, reproduction steps and whether a file was selected, but do not send sensitive source files by default.