We process your files. We don't profile you.

Morphix is a free file conversion platform with 34 tools across PDFs, images, data formats, OCR, and media. We turn one file format into another and give you the result. No ads, no AI training on your files, no resale.

Only what's needed to run the service:

• Your email (if you create an account) and a bcrypt-hashed password — we never see the plaintext.
• Files you upload, held while we convert them.
• Job records: tool used, status, timestamps.
• Basic logs (IP, status codes) used only for security and abuse prevention.
• Preferences you set in Settings (theme, default OCR language, quality, etc.).

No tracking pixels. No advertising cookies. No analytics that follow you between sites. No fingerprinting. No file contents kept once you’ve closed the conversion. The optional 3D canvas is rendered entirely client-side — your cursor never leaves your browser.

Uploaded files and conversion results are stored in Cloudflare R2 (encrypted at rest). The recommended default is auto-deletion after 30 days, which the admin can tune per deployment from the admin console. Sensitive deployments can set this to as low as 1 hour. We never look inside your files.

Files travel over HTTPS, sit in encrypted-at-rest object storage, and are accessible only via your own JWT session (kept in your browser’s localStorage). The Morphix admin can see job metadata (filename, size, conversion type) but never file contents.

Every right below is a one-click action inside Settings → Privacy & Data:

• Access & portability (GDPR Art. 20 / CCPA): download a complete JSON export of your profile, preferences, jobs and files.
• Erasure (GDPR Art. 17 / CCPA): permanently delete your account, every job record, and every file we hold for you.
• Rectification: edit your display name in Settings → Profile; change your password in Settings → Security.

Cloudflare R2 (storage + CDN), MongoDB (account metadata), and — only when explicitly enabled in the admin console — Google for Sign-In. No advertising networks, no data brokers, no AI training sets.

We use a single LocalStorage key for your JWT session, plus a `morphix_theme` key for your light/dark/system choice. No third-party cookies. No tracking IDs.

Morphix is not directed at children under 13. We don’t knowingly collect data from them. If you believe we have, email us and we’ll delete it immediately.

If we update this policy in a material way, the change date below moves and you’ll see a one-time notice. Continuing to use Morphix means you accept the updated policy.

Privacy questions, deletion requests, or anything else: write to the admin email configured for this instance (see the admin console → System tab). We respond within 5 business days.