Privacy Policy
At UseMil Convert, we believe privacy is not an afterthought or marketing slogan—it is built directly into how our software runs. This document explains transparently and accurately how files and technical data are handled.
Zero Tracking Cookies
We do not use advertising cookies, marketing pixels, or persistent user tracking.
60-Min Auto Cleanup
Files uploaded to our servers are permanently deleted within 60 minutes.
Manual Deletion
You can instantly purge your conversion files from our servers at any time.
1. File Processing: Browser-Based vs. Server-Based
To balance privacy with the technical requirements of complex media codecs, UseMil employs a differentiated processing architecture:
A. Browser-Based Local Processing (Zero Network Upload)
Certain operations run entirely within your local web browser using client-side JavaScript and WebAssembly. Specifically:
- PDF Merging (
/convert/merge-pdf/): Executed locally in memory using thepdf-libengine. - Raster Image Canvas Conversions: Standard raster format resizing and re-encoding (e.g. PNG to JPG/WebP) execute via HTML5 Canvas.
- Local Previews & Metadata Inspection: Video poster extraction, audio duration, and image thumbnails are generated in memory without sending bytes to our servers.
Files processed in this mode never leave your computer or transmit over the Internet.
B. Server-Based Conversion (Temporary Processing)
Transformations requiring specialized system software—such as audio and video transcoding (FFmpeg), vector PDF rasterization (Poppler), spreadsheet parsing (OpenPyXL), or advanced image codecs (Pillow for AVIF/ICO)—require server resources:
- Encrypted Transmission: When you initiate a server-based job, your file is uploaded over an encrypted HTTPS connection (TLS 1.3) to our API gateway (
api.usemil.online). - Isolated Storage: Files are stored temporarily in a randomly generated UUID directory (e.g.
storage/conversions/<job_id>) on our dedicated Linux servers. - Private Internal Routing: Media jobs (audio/video) are forwarded from our API gateway to our dedicated media conversion worker across an encrypted, isolated WireGuard VPN tunnel (
10.100.0.1⇄10.100.0.2).
2. Storage Retention and Automated File Deletion
We enforce an automated, multi-tiered lifecycle to ensure temporary files are deleted promptly:
| Cleanup Stage | Trigger / Interval | Action Taken |
|---|---|---|
| Periodic Expiration | Every 5 minutes (checks jobs > 60 mins) | Permanently unlinks input file, output file, job directory, and deletes database record. |
| User Immediate Deletion | On-demand (clicking "Remove" or "Delete") | Immediately purges files and directory via DELETE /api/v1/jobs/{id}. |
| Stalled Job Reaper | Jobs processing > 25 minutes | Terminates process, unlinks files, and records failure. |
| Abandoned Queue Reaper | Queued jobs waiting > 10 minutes | Safely unlinks uploaded input files to prevent backlogs. |
| Emergency Disk Safeguard | Disk free space drops below 2.0 GB | Immediately purges finished jobs older than 15 minutes. |
Note: Files are never archived, retained beyond their 60-minute lifetime, backed up to secondary storage, or used for machine learning / AI model training.
3. Cookies, Browser Storage, and Client Identifiers
We deliberately minimize the use of client-side state:
- HTTP Cookies: NoneUseMil Convert does not set any cookies—neither first-party session cookies nor third-party tracking cookies.
- Session Storage (sessionStorage): Local Session History OnlyThe website utilizes your browser's
sessionStorageexclusively for theusemil_conversion_historykey. This retains a temporary list of up to 20 recent conversions in the current browser tab so you can download finished files. This data is stored purely on your computer and is discarded automatically when you close your browser tab or click "Clear History". - In-Memory Object URLs (blob: URLs)When you select a file, the frontend creates ephemeral
blob:URLs in client memory to render visual thumbnails. These exist exclusively in your device's RAM and are explicitly released usingURL.revokeObjectURL()when an item is removed from the queue or the page is refreshed. - Analytics and Advertising Trackers: NoneNo third-party analytics services (such as Google Analytics or Tag Manager) or advertising networks are embedded on our website.
4. Contact Form Submissions & Web3Forms
When you submit a message through our Contact page form, the information you enter (your name, email address, message subject, and message content) is securely transmitted over an encrypted HTTPS connection to our form handling partner, Web3Forms.
- Email Delivery: Web3Forms processes your submission to format and dispatch an email notification directly to our configured support inbox (
support@usemil.online). - No Conversion Files Transmitted: The contact form operates completely independently of our conversion engines. You cannot attach files to the contact form, and your uploaded documents, conversion files, and conversion history are never sent to Web3Forms.
- Purpose of Processing: Contact form information is used solely to read, triage, and reply to your specific inquiry or feedback. We do not use submitted contact details for marketing campaigns, newsletters, or advertising profiling.
- Provider Retention: As documented by Web3Forms, submission data is processed to relay email notifications to the site owner's verified inbox. For full information regarding Web3Forms data handling and security standards, consult the official Web3Forms privacy documentation.
5. Technical Connection Logs
Like almost all web services, our web servers and content delivery network (Nginx and Cloudflare) automatically generate standard technical access logs when requests are made. These logs record:
- Internet Protocol (IP) address
- Date and time stamp of request
- HTTP request method and URI path (e.g.
POST /api/v1/jobs) - HTTP status code returned
- Browser User-Agent header and referrer URL
Purpose: Technical log data is processed strictly for:
- Defending infrastructure against denial-of-service (DDoS) and brute-force attacks
- Enforcing our rate-limiting rules (maximum 20 requests per minute per IP address)
- Diagnosing server software errors and measuring capacity utilization
We do not correlate IP addresses with individuals or construct user profiles.
6. Third-Party Infrastructure & Hosting
UseMil relies on reputable infrastructure providers to deliver high availability and robust security:
- Cloudflare (Pages, DNS & Edge Proxy)Our frontend static application is hosted via Cloudflare Pages. Cloudflare also acts as our reverse proxy to provide TLS encryption, DDoS mitigation, and global edge routing.
- Oracle Cloud Infrastructure (OCI)Our backend conversion servers run on dedicated virtual machines hosted in secure OCI data centers. Server communication between our API gateway and conversion worker is isolated inside an encrypted WireGuard VPN tunnel.
Questions About Privacy or Data Handling?
If you have questions about how UseMil handles files, data cleanup, or security measures, you can reach out through our Contact Page or email us directly at support@usemil.online.