PRIVACY POLICY — File Converter by Online-Convert.com

Controller: QaamGo Media GmbH, Hohenstaufenring 62, 50674 Köln, Germany. Data privacy contact: time2help@online-convert.com. Full policy: https://www.online-convert.com/privacy (section 13 covers this add-on).

WHAT LEAVES YOUR BROWSER

Files you convert (declared as "website content") — files you select in the add-on's sidebar or drag onto it, and in Gmail the single attachment or file you choose, with their file name, target format and your conversion settings. Conversion happens on our servers, so these are uploaded to us.

Sign-in data, only if you sign in (declared as "authentication information") — an OAuth 2.0 exchange with PKCE returns an access and a refresh token, and we retrieve your user id and e-mail address. Conversions made while signed in carry your access token and count against your account.

Technical data — an identifier of your installation and its device token, an identifier used to assign your conversions, your IP address, the date and time of a conversion, which add-on function and browser family it came from, and a cookie on our own domain holding the password that authorises your download, deleted when you close your browser.

Choosing one of our right-click menu entries opens our website with the address you selected. No page content is read.

NOT COLLECTED

No analytics, telemetry, crash reporting or advertising identifiers — there is no tracking code in the add-on. No browsing history and no page content: the only content script runs on Gmail, for the attachment feature. No access to local files. We do not sell your data or use it for advertising. Add-on storage stays in this browser and is not synchronised to your Firefox Account.

PURPOSE AND LEGAL BASIS

Providing the conversion you requested, and account access where you sign in: art. 6(1)(b) GDPR. Identifiers and your IP address, to enforce usage limits and prevent misuse: art. 6(1)(f) GDPR, our legitimate interest being the protection of our service.

RETENTION

Converted files can be downloaded 10 times, are blocked after 24 hours, and are physically deleted after 72 hours at the latest, with no backups. Your IP address and other data are deleted once no longer needed for the purpose collected. An access token is valid one hour; the refresh token is replaced at each renewal and expires after one year at the latest. Tokens, your user id and your e-mail address stay on your device until you sign out or uninstall, and uninstalling deletes them. Signing out does not withdraw an issued token — use "Manage Integrations" in your account to end access immediately.

RECIPIENTS AND YOUR RIGHTS

The recipient is our server host, who works with us under a data processing agreement. A third party is involved only if you choose one of the sign-in providers offered. You have the rights of access, rectification, erasure, restriction, portability and objection, and may lodge a complaint with a supervisory authority.

GOOGLE API SERVICES

Online-Convert's use and transfer of information received from Google APIs, including Gmail attachments accessed through this add-on, adheres to the Google API Services User Data Policy, including the Limited Use requirements.