Privacy Policy

Your files

Files you convert are never uploaded, transmitted or stored by this site. The CSV/Excel parsing, contact mapping, vCard generation and VCF parsing all execute as JavaScript in your browser, on your device. The site has no server-side conversion endpoint, and your contact data is never present in any request to us. When you close the tab, nothing of your file remains anywhere except your own downloads folder.

What we do collect

This site uses privacy-conscious configurations of standard analytics to understand aggregate usage (which pages are visited, roughly where visitors come from, what device class they use):

• Google Analytics 4 — anonymous page-view and event statistics. GA4 uses your IP address to derive a coarse location (country, region, city); Google states it does not log or store individual IP addresses for visitors from the EU, Switzerland and the UK. We never send it any content from your files.
• Microsoft Clarity — aggregate interaction analytics (scroll depth, dead clicks) that help us find usability problems. It never sees the contents of files you convert, which stay entirely in client-side memory.

These scripts set cookies or similar identifiers as described in Google's and Microsoft's own policies. We use the data only in aggregate, to improve the site.

Advertising

No ads run on this site today. No ad-network script loads on any page — the only third-party scripts anywhere on it are the two analytics tags named above, and there is no ads.txt file to check. Ads may be added later to help fund the site; if that happens, this page is updated to name the provider, and the cookies it sets, before the first ad script goes live.

Data requests

Because we never receive your files or any account data, there is nothing for us to hand over, correct or delete regarding your contacts. For analytics data, the controls offered by Google and Microsoft (including browser opt-outs) apply.

Your rights over your data

What these rights can actually reach here is narrow, and it is worth being exact about why. Your contact files are not part of it: they never leave your browser, so there is no copy of them for anyone to disclose, correct or erase. What is left is the analytics data described above — and that sits with Google and Microsoft, not in a database we run. This site has no accounts, no logins and no newsletter. One thing does happen on a server and is worth naming rather than glossing: the pages are served by a host (Vercel), which like any web host receives the requests your browser makes, including your IP address, and handles them under its own policy. Nothing in this site's own code touches that — there is no server-side code here at all, only pre-built pages.

Visitors in the EU, EEA and UK (GDPR)

Data protection law in these regions gives you the right to:

• Access — ask what personal data is held about you and get a copy of it.
• Rectification — have inaccurate personal data corrected or incomplete data completed.
• Erasure — ask for personal data to be deleted.
• Restriction — ask that processing be paused rather than deleted, for example while a dispute about accuracy is resolved.
• Objection — object to processing, including processing for analytics or profiling.
• Portability — receive personal data in a machine-readable form and have it transferred elsewhere where technically feasible.
• Complaint — lodge a complaint with your national data protection authority; you do not have to contact us first.

Visitors in California (CCPA/CPRA)

California law gives you the right to:

• Know — what categories of personal information are collected, where they come from, why, and who receives them. For this site the answer is on this page in full: analytics identifiers and coarse, IP-derived location, collected by Google Analytics 4 and Microsoft Clarity, used to see which pages get visited.
• Delete — request deletion of personal information collected about you.
• Correct — request correction of inaccurate personal information.
• Opt out of the sale or sharing of personal information, including sharing for cross-context behavioural advertising.
• Limit the use of sensitive personal information. This site asks for none: no name, email, account or payment details are collected anywhere on it.
• Non-discrimination — every tool here stays fully functional whether or not you exercise any of these rights. There is no paid tier, no login wall and no feature that is withheld from anyone.

On "selling" and "sharing"

We do not sell your personal information, and we receive no money for data about you. As of the date at the top of this page, no advertising or ad-network script loads on this site — the only third-party requests any page makes are to Google Analytics and Microsoft Clarity, and this site itself passes nothing to an advertising network. If that ever changes, this page changes first, and this paragraph is where it will say so.

Being precise about the limit of that promise: it covers what this site does, not what Google and Microsoft do with data once their own scripts collect it. Both are large advertising companies, and their handling of analytics identifiers is governed by their policies rather than by ours. If you would rather not rely on anyone's policy, the next section is the reliable answer.

How to exercise them

The most effective step is also the bluntest: block the two scripts. Nearly all of the data described on this page is collected by third-party JavaScript, so a content blocker, Firefox's or Safari's built-in tracking protection, or a browser setting that rejects third-party cookies stops it at the source — no request has to be made to anyone, and nothing has to be trusted afterwards. Blocking them does not affect the converters in any way. Every tool on this site runs on your own device and needs no analytics script to work; with both blocked, conversion behaves identically. Be aware that this site runs no consent banner and does not itself process opt-out signals such as Global Privacy Control, which is another reason blocking is the dependable route rather than a request to us.

Beyond blocking, the routes that actually lead somewhere:

• Google Analytics — the opt-out browser add-on disables GA across every site you visit; Google's Privacy Policy covers requests about data it holds.
• Microsoft Clarity — covered by the Microsoft Privacy Statement, which is also where Microsoft handles access and deletion requests.
• Your browser — clearing cookies and site data discards the identifiers these scripts have set for you.

To raise something with us directly, use the contact page. One person runs this site, so be aware of two limits before relying on that route: a dedicated address is still being set up and that page will say so if it is not yet live, and we hold no data of yours to act on regardless — a request to delete analytics data has to be answered by Google or Microsoft, who hold it. We would rather say that plainly than promise a response window we cannot keep.

How long data is kept

We keep no retention schedule of our own, because we store nothing ourselves. How long analytics data survives is set by Google's and Microsoft's own retention policies and the settings each offers, linked above. Your files are not part of this question at all: they are held in browser memory while the tab is open and are gone when you close it.

Changes

If this policy changes, the date above changes with it. Material changes (for example, if any feature were ever to involve a server — none is planned) would be called out prominently on the affected tool pages.