Privacy Policy

Last updated: 2026. In short: no sign-up, no account, and we do not keep your files.

1. Who we are

TinyFileHub ("we", "us") is operated by TinyFileHub, India. Contact: contact@tinyfilehub.com. Website: https://www.tinyfilehub.com.

2. Your files

We do not store your files. When you use a tool, your file is uploaded over an encrypted connection, converted automatically, and handed straight back to you. The server only holds a temporary working copy while the conversion runs and while you download the result. Once the download has finished completely, the files are deleted 2 minutes later; the 2-minute timer starts only after your download has finished. A result that is never downloaded is deleted automatically after 30 minutes. To save you from losing work when a page reloads (for example when you switch between desktop and mobile view), files you have added but not yet processed are also kept in your own browser's storage on your device for up to 30 minutes; they are never sent to us by this feature and are removed when you press Clear or start the conversion. If you use the Resume Maker, what you type stays in your browser until you press Download; it is then sent once to build the PDF or Word file and is not stored. The Passport Photo Maker's smart edits (background colour, formal dress and photo enhance), the Image Resizer, QR and text tools run entirely inside your browser: those pictures are never uploaded at all. The same is true, whenever your browser can do it, for converting JPG, PNG, WebP and BMP pictures between those formats, for merging plain PDFs (one page per sheet) and for splitting PDFs by pages, parts or ranges - the result is made on your device and nothing is uploaded; other formats and options are processed on our server as described above. The Preview button shows your own original next to the result in your browser and does not start the deletion timer. We do not open, view, copy, sell or share your files, and we do not use them to train any models.

3. No accounts, no personal profile

You do not need to register, log in, or give us your name or email address to use any tool, and there is no user database. We cannot tell who you are.

4. What we do record

• Anonymous statistics: which page was opened, the website that sent you, the country (worked out by our network provider, Cloudflare), and a one-way hash that lets us count a visit once per day. It cannot identify you.
• Usage limits: a random anonymous browser ID and short-lived request counters, so abuse can be limited fairly. Counters are cleared daily.
• Security: to block abuse, your IP address is processed in memory for rate limiting and is written to a short, rotating security log only when a request is blocked or suspicious.
• Donations (optional): payment is handled entirely by Stripe or Razorpay on their own pages. We never see your name, email or card details; we only receive a payment reference and the amount.

4a. Messages and reviews you send us

• Contact form: your name, e-mail address, message and an optional attachment (up to 5 MB) are kept so we can reply. They are kept only for that purpose, and you can ask us to delete them at any time. If e-mail delivery is configured, a copy is sent to our own mailbox.
• Reviews: the name, star rating and text you post are public on our Reviews page. To stop spam we keep a one-way hash of your IP address (not the address itself). Your browser keeps a private edit key so only you (or the site owner) can edit your review; the owner may remove reviews that break the rules.

5. Cookies and similar storage

• sft_vid - anonymous random ID (up to 13 months). Strictly necessary for fair usage limits and abuse protection.
• sft_session - only while completing a payment or in the owner's dashboard.
• sft_lang - remembers your language choice.
• Local storage - your theme, side-menu and cookie-consent choice, and the edit key of any review you wrote, kept on your device only.

6. Advertising

We show ads from Google AdSense to keep the tools free. With your consent, Google and its partners may use cookies, including the DoubleClick cookie, to serve ads based on your visits to this and other sites. You can opt out of personalised advertising at Google Ads Settings or aboutads.info, and read how Google uses data from sites that use its services. Choose "Essential only" in our cookie banner to decline personalised ads. Premium visitors see no ads.

7. Legal bases (EEA / UK)

We process the minimal technical data above to provide the service you request and to keep it secure (legitimate interests), and advertising cookies only with your consent. Because we hold no account or identity information, we usually cannot link any data to you; if you believe we hold something about you, email us and we will look into it.

8. Your rights

EEA / UK: you may ask for access, correction, deletion or restriction, object to processing, and withdraw consent at any time. You may also complain to your data protection authority.

California (CCPA/CPRA): we do not sell personal information for money and hold no personal profile of you. Use "Essential only" in the cookie banner to opt out of ad personalisation.

9. Retention

Your files: removed 2 minutes after your download completed, or after 30 minutes if never downloaded. Contact messages: until handled, then deleted (or on request). Reviews: until you or we remove them. Usage counters: current day only. Security log: a small rotating file, a few weeks at most. Anonymous statistics: aggregated, no personal data.

10. Security

We use HTTPS, unguessable private download links, automatic deletion of files, file validation, rate limiting and strict browser security headers. No online service can promise absolute security, but we work to keep risk low.

11. International transfers

Traffic passes through Cloudflare's global network and our servers may be located outside your country, with the safeguards described here.

12. Children

The service is not directed to children under 13 (or 16 where local law requires) and we do not knowingly collect their personal data.

13. Changes

We may update this policy; the date at the top shows the latest revision.