Your files stay private
Here's exactly what happens to your file when you use HarborConvert — and what doesn't.
What happens to your file
- 1You drop a file onto the converter
- 2The browser reads the file into local memory
- 3The conversion library processes it — entirely in your browser
- 4The converted file is saved to your downloads folder
- 5Browser memory is cleared
Security guarantees
Zero file visibility
Our servers have no code path that reads, stores, or logs file content. We physically cannot access your files.
HTTPS everywhere
All traffic is encrypted in transit with TLS 1.3. Even the JavaScript that runs your conversion is delivered over HTTPS.
Metadata only for paid accounts
Pro and Business accounts store conversion metadata (filename, size, format, timestamp) for history — never file content.
Open-source libraries
We use widely audited open-source libraries: pdf-lib, PDF.js, SheetJS, and the browser's native Canvas API.
Technical details
How does client-side conversion work?
When you open a converter, we load a JavaScript or WebAssembly library into your browser. Your file is read from your disk into browser memory, processed by that library, and the result is written back to your disk. At no point does any data travel over the network.
What if I'm using a shared or work computer?
Files are only held in browser memory during the conversion and cleared immediately after download. Nothing is written to localStorage or IndexedDB. Other users of the same computer cannot access your converted files through HarborConvert.
How do you handle authentication credentials?
We use Supabase Auth with industry-standard JWT sessions. Passwords are never stored in plaintext — Supabase uses bcrypt hashing. We support Google OAuth as an alternative to passwords.
Is HarborConvert GDPR compliant?
Yes. We collect the minimum data necessary (email, subscription status, conversion metadata for paid users). We don't sell data. You can delete your account and all associated metadata at any time from your dashboard settings.
Is it HIPAA-friendly?
Because we never store, transmit, or process your file content on our servers, HarborConvert is appropriate for converting files that contain PHI. We recommend reviewing our privacy policy for your specific compliance needs.