Most free online file converters work the same way: you hand your document to a server, it is processed somewhere you cannot see, and a retention promise in the footer is the only thing standing between your data and a stranger's disk. FileForge is built the other way around. All 49 tools run inside your browser tab, so the privacy guarantee is architectural rather than a policy you have to trust.
When you open a tool page, only the interface downloads. The moment you pick a file it is read straight into memory and processed by libraries already running on your CPU — pdf-lib and pdf.js for documents, the browser's own codecs and Canvas for images, FFmpeg compiled to WebAssembly for audio and video, and plain JavaScript parsers for data and code. The result is handed back as an ordinary download. There is no upload step, no queue, no temporary copy, and no account.
That has practical consequences beyond privacy. Speed scales with your machine instead of a shared free tier, there are no file-size caps or watermarks, and once a page has loaded the tools keep working offline in the browser — useful on a locked-down work laptop or a phone in aeroplane mode. It also means we collect nothing: no file contents, no filenames, no derived metadata.
You do not have to take our word for it. Open your browser's Network tab and run a conversion: the page assets load once and nothing carrying your file leaves the device. Then disconnect from the network and try again — it still works.