ConvertNow Privacy Policy
What we collect, why we collect it, the tools we use to run this site, and the choices you have. Written in plain language, not just legal boilerplate.
1. Who we are
ConvertNow.tools ("ConvertNow", "we", "us") runs the website convertnow.tools, a library of free online tools and guides. We also make two analytics products, the ConvertNow Analytics WordPress plugin and ConvertDash. This policy covers the website and its subdomains.
The controller responsible for your data under the GDPR is Prateek Prashant Zare, Claudiusstr. 10, 10557 Berlin, Germany, email [email protected]. Full details are in our Impressum.
If anything here is unclear, email us and a person will answer.
2. What we collect
What you type into a tool
Most tools, such as converters, calculators, formatters and image tools, run entirely in your browser. What you enter stays on your device and never reaches our servers. A few tools cannot work locally, such as DNS lookups, WHOIS and page speed checks. They send only what you type, for example a domain name, so the lookup can run. We do not store it.
Information you give us
No tool needs an account. If you email us, we receive your address and your message. If you download our plugin, start a ConvertDash trial or buy a licence, we receive your name, email address, the domain you will use it on and, for purchases, billing details from the payment provider.
Information collected automatically
- Our own analytics. We count visits with ConvertDash, our own product. It sets no cookies, stores nothing on your device and keeps no persistent identifier. A visit is recognised for one day through a one way hash of your IP address, browser and a salt that changes every day. Raw IP addresses are not stored. We see aggregate figures such as page views, referrers, country and device type.
- Jetpack Stats, only with consent. If you allow Statistics, Jetpack Stats sends page view data, including your IP address, to WordPress.com (Automattic) for aggregate site statistics. Without your consent it does not load.
- Server and security logs. Our host, our CDN and Jetpack's security features process IP addresses and request details to deliver pages and block attacks.
- Advertising data. Google AdSense collects data to show and measure ads. What it may do depends on your consent, described in sections 4 and 5.
3. How and why we use it
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Delivering the site and running tools | IP address, request data | Legitimate interest, Art. 6(1)(f) |
| Security and abuse prevention | IP address, request data, logs | Legitimate interest, Art. 6(1)(f) |
| Cookieless visitor statistics | Daily hashed visit data, aggregate figures | Legitimate interest, Art. 6(1)(f) |
| Jetpack Stats | Page views, IP address, device data | Consent, Art. 6(1)(a) |
| Personalised ads, and ad cookies | Cookie IDs, device and browsing data | Consent, Art. 6(1)(a) and § 25(1) TDDDG |
| Non personalised ads | Contextual data, IP address for fraud checks | Legitimate interest, Art. 6(1)(f); consent where cookies are used |
| Answering your emails | Email address, message | Legitimate interest, Art. 6(1)(f) |
| Plugin downloads, trials and licences | Name, email, domain, billing data | Contract, Art. 6(1)(b) |
| Accounting and tax records | Invoices, payment records | Legal obligation, Art. 6(1)(c) |
We do not sell your data and we do not build profiles of individual visitors ourselves.
4. Cookies and consent
When you first visit, a notice asks for your choice. We use our own consent tool, CN Consent. It stores your choice in your browser's local storage, not in a cookie, and makes no request to any outside server. You can change your choice at any time through Privacy settings in the footer.
- Necessary is always on. It covers security, payments and remembering your choice.
- Statistics is optional. It switches on Jetpack Stats. Our own analytics needs no consent because it sets no cookies and stores nothing on your device.
- Advertising is optional. It lets Google and its partners use cookies to personalise and measure ads.
For visitors in the EU, the EEA, the UK and Switzerland, advertising and analytics storage are switched off by default and only switched on if you agree. We pass your choice to Google using Google Consent Mode. Every cookie we know of is listed in our Cookie Policy.
5. Advertising and Google AdSense
To keep the tools free, this site shows ads served by Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Third party vendors, including Google, use cookies to serve ads based on a visitor's previous visits to this site or other sites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and other sites on the internet.
- If you agree to advertising, ads may be personalised. If you decline, Google shows non personalised or limited ads. These rely on context, such as the page you are reading, and still use some data, such as your IP address, for frequency capping, fraud prevention and reporting.
Learn more and control your data:
- How Google uses information from sites or apps that use its services
- Google Ads Settings, to turn off personalised ads
- youronlinechoices.eu (EU) and aboutads.info (US), to opt out of other vendors
- Google Privacy Policy
6. Service providers we use
Each provider gets only what it needs to do its job.
| Service | What it does | Policy |
|---|---|---|
| Hostinger | Web hosting, email and daily backups | Hostinger Privacy Policy |
| Cloudflare | Content delivery and protection against attacks. Processes IP addresses and request data. | Cloudflare Privacy Policy |
| Google AdSense | Advertising, see section 5 | Google Privacy Policy |
| ConvertDash (our own) | Cookieless visitor statistics, hosted by us | This policy |
| Jetpack (Automattic) | Security, brute force protection and performance features. Jetpack Stats, only with your consent. | Automattic Privacy Policy |
| LiteSpeed Cache | Page caching. May set a technical cookie to serve the right version of a page. | Runs on our server |
| UpdraftPlus and Google Drive | Weekly site backups, which can include personal data held on the site | Google Privacy Policy |
| PayPal, Stripe, Razorpay, Cashfree | Payments for licences and voluntary donations. We never see your full card details. | PayPal, Stripe, Razorpay, Cashfree |
| Rank Math | Search engine metadata. Collects no visitor data. | Runs on our server |
| Sassy Social Share | Share buttons. Nothing is sent until you click one, then the network's own policy applies. | See each network's policy |
7. Our analytics products
The ConvertNow Analytics plugin stores the data it collects in your own WordPress database on your own server. We do not receive it. When you download the plugin, we keep your name, email and domain so we know who uses it and can send occasional update notes. ConvertDash stores your site's analytics on our servers. For it, we act as your processor, and a data processing agreement is available on request.
8. Sharing and disclosure
We share data only with the providers in section 6, so they can do their job, or when the law requires it, or to protect the rights and safety of ConvertNow, our users or the public.
9. How long we keep data
- Analytics: hashed visit data is tied to a visit for one day only. Aggregate statistics are kept without limit, as they identify no one.
- Server and security logs: kept briefly by our host, CDN and Jetpack under their own settings, typically a few weeks.
- Emails: as long as needed to handle your request, then deleted.
- Licence and customer records: while your licence is active, then as long as tax law requires, usually up to 10 years in Germany.
- Your consent choice: in your browser until you change or clear it.
- Backups: overwritten on a rolling basis, within a few weeks.
10. Your rights
You have the right to access, correct or delete your data, to restrict or object to processing, and to data portability. Where we rely on consent, you can withdraw it at any time with effect for the future, through Privacy settings. Where we rely on legitimate interest, you can object on grounds relating to your situation. Email [email protected] and we will reply within one month.
You may also complain to a data protection authority. Ours is the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI). California residents have rights under the CCPA/CPRA to know what we collect and to request deletion, using the same email.
11. Children
This site is not directed at children under 16. We do not knowingly collect their data. If you believe a child has sent us information, contact us and we will delete it.
12. Security
The site runs on HTTPS throughout. We use Jetpack's security features, Cloudflare and our host's infrastructure to block unauthorised access. No system is perfectly secure, but we take reasonable care.
13. International transfers
Some providers, such as Google, Cloudflare, Automattic, PayPal and Stripe, may process data in the United States or elsewhere outside the EU. Where they do, transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses. Razorpay and Cashfree process payments in India under their own safeguards.
14. Changes to this policy
We update this policy when the site or the services we use change. The date at the top always shows the latest version.
15. Contact
Questions about your data: [email protected], or by post to Prateek Prashant Zare, Claudiusstr. 10, 10557 Berlin, Germany.
Have a question we didn't answer here?
Email us directly and a real person will get back to you, we don't outsource support to a bot.