Privacy Policy

Last updated 2026-11-13

Summary: files you convert or edit are processed locally in your browser and are never sent to us. We never receive or store your videos, audio or images, not even temporarily. If you sign in, your Gloath account (email address, plan and billing status) is stored by our accounts service at accounts.gloath.com, shared by every Gloath app; payment details are handled by Stripe.

Who we are

Video Converter Online is operated by Gloath Limited ("we", "us"), New Zealand. We comply with the New Zealand Privacy Act 2020 and, where applicable, the EU/UK GDPR. Contact our privacy officer at support@gloath.com.

Your media files

Conversion and editing happen entirely on your device using WebAssembly. We never receive, view or store your files, on any plan. The Share button hands the file to your device's own share sheet (e.g. AirDrop, WhatsApp, email); it does not pass through our servers. So that you don't lose your place if you leave the page, the files you have open are also kept in your browser's own storage on your device for up to 3 days and offered back on your next visit; removing them from the list, or clearing this site's data in your browser, deletes them. AI subtitles also run on your device; the AI model is downloaded to your browser from a public model host (Hugging Face) but your audio is never uploaded.

Information we collect

  • Account: email address, sign-in timestamps and which Gloath apps you use (only if you sign in). One Gloath account works across all Gloath apps.
  • Billing: handled by Stripe. We receive your plan, subscription status and a customer ID; we never see your full card number.
  • Analytics: if you consent (or where consent isn't required), Google Analytics collects usage data like pages viewed, device type and approximate location, plus events such as "export completed". It never includes your file contents.
  • Anonymous usage counters: daily totals such as "exports completed" per format, with no personal data and no IP addresses, so we know which features are used.
  • Technical logs: our hosting provider (Cloudflare) processes IP addresses for security and abuse prevention.

Cookies & local storage

  • vco_session (essential, only when signed in): keeps you signed in.
  • vco_hint (essential): tells the page you're signed in without contacting our servers.
  • vco_oauth (essential, a few minutes while you sign in): protects the sign-in from tampering.
  • vco_access (essential, one minute at a time, only when signed in): a signed copy of your plan, so pages load without asking our accounts service each time.
  • vco_billing (essential, ten minutes after you open billing): makes sure a plan change shows straight away.
  • gloath_session on accounts.gloath.com (essential, only when signed in): lets you sign in to other Gloath apps with one click.
  • Google Analytics cookies (_ga*): analytics, only with consent in the EEA/UK/Switzerland. You can change your choice anytime via Cookie settings.
  • Local storage: your theme, saved presets and settings, and the files you have open (for up to 3 days, see "Your media files"), kept only in your browser.

How we use information

To provide and secure the service, process payments, send sign-in and transactional emails, provide support, and improve the product. We do not sell your personal information.

Service providers

Cloudflare (hosting, database, security), Stripe (payments), our email delivery provider (sign-in emails), Google (analytics), jsDelivr (delivering the open-source conversion engine). These providers may process data outside New Zealand; we rely on appropriate safeguards.

Retention

Account data is kept while your account is active. Synced presets (Pro) are kept until you delete them, and are removed within a day of you deleting your Gloath account.

Your rights

You can see, change, download or delete your Gloath account yourself on your account page at accounts.gloath.com. You can also request access to or correction of your personal information, or ask us to delete your account, by emailing support@gloath.com. If you're not satisfied with our response you can complain to the Office of the Privacy Commissioner (privacy.org.nz) or your local data protection authority.

Children

The service is not directed at children under 13, and we don't knowingly collect their personal information.

Changes

We'll post any changes here and update the date above.