{
  "title": "Browser File-Converter Privacy Benchmark",
  "version": "1.0",
  "measured": "2026-08-16",
  "method": "Playwright-driven Chromium 147; each service's JPG\u2192PNG tool page loaded, cookie banners dismissed, a 227 KB 1600\u00d71600 JPEG dropped; all network requests logged for 25\u201335 s. Third-party = any host outside the service's own registrable domain. Tracker list: GA/GTM, DoubleClick, AdSense, Meta, Hotjar, Clarity, Amplitude, Mixpanel, Taboola, Outbrain, Criteo and others. Upload detection via CDP request body sizes; for server-side services the file transfer is architectural (their own retention policies confirm server custody), so byte-level capture was not required to classify them. CloudConvert's 0-third-party result was re-verified with a full headed-browser load (63 requests, all first-party).",
  "license": "CC BY 4.0 \u2014 reuse with a link and the measurement date",
  "rows": [
    {
      "service": "OfflineConvert",
      "this_site": true,
      "architecture": "local",
      "page_requests": 13,
      "third_party_hosts": 1,
      "third_party_sample": [
        "static.cloudflareinsights.com"
      ],
      "trackers_detected": [],
      "tracker_count": 0,
      "session_recording_observed": null,
      "upload_during_conversion": false,
      "note": "Conversion runs in the browser; zero upload measured during an actual conversion."
    },
    {
      "service": "Squoosh",
      "this_site": false,
      "architecture": "local",
      "page_requests": 20,
      "third_party_hosts": 1,
      "third_party_sample": [
        "www.google-analytics.com"
      ],
      "trackers_detected": [
        "google-analytics"
      ],
      "tracker_count": 1,
      "session_recording_observed": null,
      "upload_during_conversion": false,
      "note": "Google open-source; local processing, GA present."
    },
    {
      "service": "VERT",
      "this_site": false,
      "architecture": "local",
      "page_requests": 40,
      "third_party_hosts": 3,
      "third_party_sample": [
        "ipapi.co",
        "cdn.jsdelivr.net",
        ""
      ],
      "trackers_detected": [],
      "tracker_count": 0,
      "session_recording_observed": null,
      "upload_during_conversion": false,
      "note": "Local processing; makes a geolocation API call (ipapi.co) on load."
    },
    {
      "service": "CloudConvert",
      "this_site": false,
      "architecture": "server",
      "page_requests": 63,
      "third_party_hosts": 0,
      "third_party_sample": [],
      "trackers_detected": [],
      "tracker_count": 0,
      "session_recording_observed": null,
      "upload_during_conversion": "by-design (see note)",
      "note": "Server-side conversion by design, but the cleanest surface in that group: 0 third-party requests at page load (all assets self-hosted) \u2014 re-verified in a headed browser. Files still transit their servers to be converted (their retention policy documents server custody)."
    },
    {
      "service": "Convertio",
      "this_site": false,
      "architecture": "server",
      "page_requests": 37,
      "third_party_hosts": 11,
      "third_party_sample": [
        "fonts.googleapis.com",
        "clickiocmp.com",
        "www.googletagmanager.com",
        "s.clickiocdn.com",
        "apis.google.com",
        "accounts.google.com"
      ],
      "trackers_detected": [
        "googletagmanager",
        "google-analytics",
        "doubleclick"
      ],
      "tracker_count": 3,
      "session_recording_observed": null,
      "upload_during_conversion": "by-design (see note)",
      "note": "Server-side conversion by design (per their own policy: files stored up to 24h)."
    },
    {
      "service": "FreeConvert",
      "this_site": false,
      "architecture": "server",
      "page_requests": 139,
      "third_party_hosts": 19,
      "third_party_sample": [
        "cdn.confiant-integrations.net",
        "developer.apple.com",
        "upload.wikimedia.org",
        "static.cloudflareinsights.com",
        "www.googletagmanager.com",
        "s3.us-east-2.amazonaws.com"
      ],
      "trackers_detected": [
        "googletagmanager",
        "doubleclick",
        "clarity.ms"
      ],
      "tracker_count": 3,
      "session_recording_observed": "661 KB \u2192 i.clarity.ms",
      "upload_during_conversion": "by-design (see note)",
      "note": "Server-side conversion by design. Measured: 661 KB of session-recording telemetry sent to Microsoft Clarity during the visit."
    },
    {
      "service": "iLoveIMG",
      "this_site": false,
      "architecture": "server",
      "page_requests": 54,
      "third_party_hosts": 24,
      "third_party_sample": [
        "www.googletagmanager.com",
        "securepubads.g.doubleclick.net",
        "analytics.google.com",
        "stats.g.doubleclick.net",
        "www.google.co.kr",
        "cm.g.doubleclick.net"
      ],
      "trackers_detected": [
        "googletagmanager",
        "doubleclick",
        "googlesyndication",
        "criteo",
        "openx"
      ],
      "tracker_count": 5,
      "session_recording_observed": null,
      "upload_during_conversion": "by-design (see note)",
      "note": "Server-side conversion by design (per their policy: files deleted after processing window)."
    },
    {
      "service": "Zamzar",
      "this_site": false,
      "architecture": "server",
      "page_requests": 50,
      "third_party_hosts": 17,
      "third_party_sample": [
        "cdn.jsdelivr.net",
        "static.senja.io",
        "plausible.io",
        "www.googletagmanager.com",
        "widget.senja.io",
        "googleads.g.doubleclick.net"
      ],
      "trackers_detected": [
        "googletagmanager",
        "doubleclick"
      ],
      "tracker_count": 2,
      "session_recording_observed": null,
      "upload_during_conversion": "by-design (see note)",
      "note": "Server-side conversion by design (per their policy: files retained temporarily)."
    },
    {
      "service": "Online-Convert",
      "this_site": false,
      "architecture": "server",
      "page_requests": 177,
      "third_party_hosts": 20,
      "third_party_sample": [
        "c.amazon-adsystem.com",
        "securepubads.g.doubleclick.net",
        "www.googletagmanager.com",
        "config.aps.amazon-adsystem.com",
        "",
        "analytics.google.com"
      ],
      "trackers_detected": [
        "googletagmanager",
        "doubleclick",
        "googlesyndication",
        "amazon-adsystem"
      ],
      "tracker_count": 4,
      "session_recording_observed": null,
      "upload_during_conversion": "by-design (see note)",
      "note": "Server-side conversion by design."
    }
  ]
}