Privacy policy

Last updated: 15 October 2026

This policy explains what personal data is processed when you use convertimate.com, why, on what legal basis, for how long, and what your rights are under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

In short

• There are no accounts, no forms and no newsletter. We never ask for your name.
• Every conversion is calculated in your browser. The numbers you type are never sent to us.
• We set no cookies and use no advertising or tracking tools.
• Some technical data, such as your IP address, is necessarily processed by the host and, on currency pages, by the exchange-rate services.

Who is responsible

The data controller is Hasan ABDL GHANI, 2 rue Hélène Boucher, 76140 Le Petit-Quevilly, France. You can reach us at [email protected].

Hosting

The site is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) on Cloudflare Pages. To deliver each page and protect the site against attacks, Cloudflare processes connection data: your IP address, browser and device type, the page requested, the referring page and the time.

• Purpose: delivering the site and keeping it secure.
• Legal basis: our legitimate interest in running a working, secure website (GDPR art. 6(1)(f)).
• Retention: short-lived security and delivery logs kept by Cloudflare under its own policy. We do not receive or keep these logs.
• Where: Cloudflare serves pages from its worldwide network and may process this data in the United States (see “Transfers outside the EU” below). See Cloudflare's privacy policy.

Currency pages: exchange rates

Only on currency pages, your browser sends a request directly to the exchange-rate services to download the latest rates: Frankfurter (api.frankfurter.dev, which republishes European Central Bank rates) and the open-source currency-api (served by jsDelivr at cdn.jsdelivr.net, with a copy on Cloudflare Pages). Like any web server, they receive your IP address and browser information when they send the file. They do not receive the amounts or currencies you convert. No other page contacts them.

• Purpose: showing up-to-date rates, which you asked for by opening the page.
• Legal basis: legitimate interest (art. 6(1)(f)).
• Retention: technical logs under each service's own policy.

Transfers outside the EU

The host and the rate services are run by, or delivered through, US companies. They may process your IP address and connection data in the United States:

• Cloudflare, Inc. (host, USA), on every page.
• Frankfurter (api.frankfurter.dev) and currency-api, delivered through jsDelivr (whose network is run by Cloudflare and Fastly, both US companies) and through Cloudflare Pages, only on currency pages.

The United States is not considered by the EU to offer the same level of protection in general, so these transfers rely on one of the safeguards of chapter V of the GDPR:

• the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023, GDPR art. 45), for recipients certified under it, such as Cloudflare and Fastly;
• and/or the European Commission's Standard Contractual Clauses (GDPR art. 46(2)(c)), which Cloudflare also includes in its data processing terms.

You can check whether a company is certified on dataprivacyframework.gov, and ask us for more details at [email protected].

Emails you send us

If you write to us, we receive your email address and your message.

• Purpose: answering you.
• Legal basis: legitimate interest in replying to messages (art. 6(1)(f)).
• Retention: up to 3 years after our last exchange, then deleted.

Storage in your browser

We use your browser's local storage (not cookies) for three conveniences: your light/dark theme, the converters you used recently, and a copy of the currency rates (reused for 6 hours) so pages load faster. This data stays on your device; we never see it. Because it only serves features you use, it is exempt from consent (article 82 of the loi Informatique et Libertés). Clearing your browser data deletes it.

What we don't do

We don't sell or rent personal data, we don't build profiles and we make no automated decisions about you.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting what was done before. You can also give instructions about what happens to your data after your death. To use these rights, write to [email protected]. We reply within one month. As we hold almost no data that identifies you, requests about connection logs are best sent to the providers named above; we'll help you with that.

If you think your rights have not been respected, you can complain to the supervisory authority, the CNIL (Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr), or to the authority of the EU country where you live.

Children

This site is for a general audience. We don't knowingly collect personal data from children.

Changes

This policy is updated before any new tool that processes personal data is added, and the date at the top changes with it. See also the legal notice.