Online converters are convenient, but every upload means handing a copy of your file to someone else's computer. For a holiday photo that rarely matters. For an ID card, a contract or a medical report it matters a lot. This article gives you a practical way to decide what is safe to upload, and what to look for in a service.

What can go wrong

  • Files kept longer than you expect. Some services store uploads for days or indefinitely, sometimes on shared storage, and some use them to build datasets.
  • Files visible through guessable links. Poorly built services give each result a short, predictable web address that others could find.
  • Interception. Without encryption, files can be read in transit on shared networks. Any reputable site uses HTTPS today.
  • Bundled software. Some "converter" sites push downloads of installers that include unwanted software.
  • Data left inside the file. Photos and documents carry hidden information such as location, camera model, author names and edit history.

Signs of a trustworthy service

  1. HTTPS everywhere and no certificate warnings.
  2. A clear privacy policy that says how long files are kept and states that they are not viewed, shared or used for training. Vague language is a warning sign.
  3. No account required for simple tasks. Fewer personal details collected means fewer to lose.
  4. Real contact details and an identifiable operator.
  5. Web-based, no installer. You should never need to download software to convert a file online.
  6. Reasonable ads. Excessive pop-ups and misleading "download" buttons suggest the site cares little about users.

Decide what to upload

A simple three-level approach works well:

  • Low sensitivity (public images, recipes, slides from a public talk): any reputable converter is fine.
  • Medium sensitivity (personal photos, CVs, invoices): use a service whose policy you have read, and delete the originals from the service if it offers a way to.
  • High sensitivity (passports, bank statements, medical records, signed contracts): prefer software that runs on your own computer, or avoid conversion altogether if you can.

Habits that protect you

  • Crop and redact first. If only part of a document is needed, remove the rest before uploading.
  • Remove metadata from photos you will publish: most phones let you strip location when sharing.
  • Use a clean file name that does not include your full name or ID number.
  • Download the result and close the tab. Do not leave sessions open on shared computers.
  • Be cautious on public Wi-Fi. HTTPS protects the content, but avoid handling sensitive documents on networks you do not trust.
  • Keep your own backups. Never rely on a conversion service as a place to keep files.

How TinyFileHub handles files

We designed the service around keeping as little as possible. There are no accounts or logins. Files travel over an encrypted connection, are processed automatically and returned to you, and are removed from the server 2 minutes after your download has finished; the 2-minute timer starts only after your download has finished, and anything never downloaded is deleted after 30 minutes. We do not open, sell or share files, and we do not use them to train models. Statistics are anonymous page counts and countries, and payments are handled entirely by the payment provider. You can read the full details in the privacy policy, and the open-source components used are listed on the credits page.

A note on honesty

No online service can promise absolute security, and we do not. What we can do is minimise what exists to be lost: no stored files, no personal profiles and no unnecessary data. When you choose any tool, favour the ones that describe clearly what they do and keep little.

Quick checklist before you upload

  1. Do I need to upload this at all, or can I do it locally?
  2. Have I removed anything the recipient does not need?
  3. Does the service use HTTPS and explain its retention?
  4. Will I delete or secure the downloaded result afterwards?

If the answers are yes, you are making a reasonable, informed choice.

Questions worth asking any service

  1. Where are my files processed, and for how long are they kept?
  2. Is the link to my result guessable or shareable by someone else?
  3. Is the service run by a named company or person with a contact address?
  4. Does it sell or share data with advertisers?
  5. What happens if I want my file deleted early?

For businesses and teams

If you handle customer data, the questions above become legal obligations. Under data-protection rules such as the GDPR, uploading personal data to a third-party service makes that service your processor, which normally requires a written agreement. Unless one is in place, keep customer files out of public web tools and use software that runs inside your own network.

Metadata you may be sharing without knowing

Photographs can embed the exact location where they were taken, the camera and the time. Office documents can contain author names, revision history and comments. PDFs can contain the software used and the original file path. Removing metadata before you upload or publish is a cheap, effective privacy measure: most operating systems offer a "remove properties" option, and many phones let you strip location when sharing.