Your files
- Originals, including guest uploads and accepted formats we cannot read, are retained for up to 7 days from upload. Guest uploads later linked to an account keep this same deadline. Downloads and new conversions do not extend retention.
- We use files to process your requests. Authorized administrators may also download and manually inspect originals to investigate errors and improve the tools.
- New conversion results created while signed in are available for up to 7 days. Guest results remain available for six hours. Existing files and results are also capped at 7 days from creation; shorter deadlines are preserved.
- Originals are not published, sold, used for advertising or used to train artificial intelligence models. Administrative access requires authentication and downloads are recorded in the audit log.
- Transfers use HTTPS. Clearing the list on the page removes items from the interface but does not delete the original from the server. To request earlier deletion, use the contact below.
Data we collect
-
Server logs: IP address, request time, URL and user agent, kept for up to 30 days for security and abuse prevention.
-
Analytics: we record sessions, page views, referrers, conversion events, IP addresses, approximate location and browser information. A random identifier stored in the browser helps recognize team visits and exclude tests from metrics. Interaction and automation signals help estimate traffic quality. We do not use device fingerprinting or advertising trackers.
-
Accounts: if you register, we store your name, email, password hash or verified Google identity, account sessions and conversion history. We never store your password in plain text.
-
Language measurement: we record only the browser’s preferred primary language code and explicit language-picker changes to assess translation demand. We do not store the full browser language list or redirect based on it.
Cookies and local storage
We store theme, language and version preferences in local storage. A secure visitor cookie lasts up to one year; a signed-in session lasts 30 days and can be revoked by signing out. A short-lived cookie protects Google sign-in. Anonymous free usage is controlled by browser identity and a keyed hash of the IP address, not device fingerprinting. Free allowance records are retained to enforce the one-time limit. The pending conversion reference is kept in local storage so you can continue after login or checkout.
Accounts and payments
The viewer is free. One successful conversion for new users is free; anonymous visitors on the same network share the IP allowance. CDRfix Pro provides unlimited conversions for US$4.99 per month within the technical limits of the service. You can also purchase a single conversion without an account, or choose the weekly subscription. Stripe processes card details; CDRfix stores the purchase, file and output identifiers to authorize the result.
Stripe processes subscription payments, invoices and card details on its hosted pages. We store Stripe customer and subscription identifiers and payment status; we do not store card numbers or send uploaded files to Stripe. Google receives the information necessary for Google sign-in if you choose it. Our email provider processes the email address and account confirmation or recovery message. Confirmation and recovery links expire and can be used only once.
Your rights
You may request access to or deletion of the personal data and files we hold, including before the storage period ends. Write to privacy@cdrfix.com and, where possible, include the file or conversion identifier to help locate the upload.
Changes
We will update this page when our practices change and note the date at the top.