TLS 1.3 & HTTPS HSTS Encryption
All file transfers and API calls use strict TLS 1.3 encryption with HTTP Strict Transport Security (HSTS). Files are stored in non-public directories outside the web root.
Isolated Per-Job Sandboxes
Each server-side conversion runs in a dedicated, ephemeral job directory (`processing/{uuid}`) that is recursively wiped immediately after the output binary is generated.
1-Click Instant Shred + 5-Min Cron
Click "Delete file from server now" right after downloading for 0-second deletion, or rely on our 5-minute forensic cron that purges uploads at 30m and outputs at 60m.
Cryptographic SHA-256 Checksums
Every converted output includes a verifiable SHA-256 integrity hash so you can cryptographically verify that your downloaded file was not altered in transit.
Zero-Upload Browser Mode
Supported raster image and text conversions run 100% locally in your browser via HTML5 Canvas & WebAssembly — zero bytes are transmitted over the network.
EU Data Residency & GDPR Compliance
Hosted in the European Union (Spain) with strict Consent Mode v2 (`analytics_storage: denied` by default) and zero AI model training on user files.
Hybrid Processing Matrix: Client-Side Browser vs. Isolated EU Server
Unlike traditional converters that force every file through a remote queue, KaijuConverter automatically selects the most private execution path for your format and Studio controls:
| Pipeline Mode | Eligible Formats & Tools | Network Transfer | Retention Policy |
|---|---|---|---|
| ⚡ Client-Side Browser (0-Upload) | Standard PNG, JPG, WebP, BMP, GIF, SVG, JSON, CSV, XML, YAML, Markdown conversions | 0 bytes uploaded (100% local RAM) | Never touches our servers |
| 🔒 Isolated EU Server Engine | PDF Studio (QPDF, Ghostscript), OCR (Tesseract), Office (LibreOffice), Video/Audio (FFmpeg), RAW/HEIC/AVIF (ImageMagick), Ebooks (Calibre), Archives (7-Zip) | TLS 1.3 encrypted + SHA-256 verified | 0s via "Delete Now" button, or auto-purged at 30m (uploads) / 60m (outputs) |
Responsible Vulnerability Disclosure & Security Acknowledgments
We welcome reports from independent security researchers in accordance with RFC 9116 (/.well-known/security.txt). If you discover a potential security issue, please report it privately to security@kaijuconverter.com. We acknowledge receipt within 48 hours and do not pursue legal action against good-faith researchers who avoid accessing other users' data or disrupting service availability.