Privacy policy

The short version: your files never leave your device, and the only thing FileAnvil collects is anonymous usage statistics that cannot be tied to you.

Last updated: 23 July 2026

Your files

Every tool on this site runs entirely inside your browser using WebAssembly. There is no upload endpoint on this site — not a policy choice we ask you to trust, but a property of the build you can verify yourself. Your files, their names, their sizes and their contents are never transmitted anywhere. Here's how to check that claim in ten seconds.

What we do collect

To know whether the tools are useful — which ones get used, how many people visit, from which countries — we collect a small set of anonymous events using PostHog, hosted in the EU. Each event contains at most:

a fixed event name (a page view, a tool being used, a download),
the name of the tool involved (for example merge-pdf),
the address of the page you were on and the page that referred you here,
a random identifier explained below.

Your approximate location (country) is derived by PostHog from the network request itself on their servers — your browser does not send any extra location data. Nothing about your files ever appears in these events. Our end-to-end tests fail the build if anything derived from a file shows up in an outbound request.

The random identifier

To count returning visitors we store a randomly generated identifier in your browser's local storage (fa_did), plus a short-lived session identifier (fa_sid). These are random strings — they contain nothing about you, your device, or your files, and we could not connect them to a person even if asked to. There are no cookies, no accounts, no fingerprinting, and no session recording. Clearing your browser's site data removes both identifiers permanently, and the site keeps working exactly the same.

Embedded widgets

Other websites can embed FileAnvil tools in an iframe. Those widgets are the same client-side tools and send the same anonymous events — files dropped into an embedded widget never leave your device either.

Who else sees data

PostHog (EU Cloud) processes the anonymous events described above on our behalf. The site is hosted on Netlify, which — like any web host — sees standard web-server request logs. Nobody else receives anything, and nothing is sold or shared for advertising.

If this ever changes

If the site ever introduces advertising or any new data collection, this page will say so plainly, with the date of the change, before it happens. The one thing that will not change is the core promise: no file uploads, ever — the moment that changed, this product would have no reason to exist.