Privacy policy.
MediaBay is an image converter designed for one specific reason: to prevent your photos from having to travel across the Internet. This document explains exactly what we process, what we do not process, and where your data lives.
Data controller.
The MediaBay.fr website is published and operated by Markovic Technologies, a French sole proprietorship, acting as data controller within the meaning of the GDPR.
- Name
- MARKOVIC TECHNOLOGIES
- Legal form
- Sole proprietor
- Director
- Nikola Markovic
- Registered office
- 117 Avenue de Soissons, 02400 Château-Thierry, France
- SIREN
- 105 669 238
- Privacy contact
- contact@markovictechnologies.com
Hosting
The site and its service infrastructure (web pages, static resources, logs) are hosted by OVH SAS (2 rue Kellermann, 59100 Roubaix, France). All server-side processing carried out by MediaBay therefore takes place within the territory of the European Union.
The “Zero Upload” principle: strictly local processing.
No image you convert is transmitted to our servers. Processing runs exclusively in your browser's memory.
When you drop a file into the converter, MediaBay uses your browser's HTML5 Canvas and WebAssembly APIs to decode, transform and re-encode the image. This operation takes place on the client side, in an isolated Web Worker.
As a result:
- your files are never sent to a MediaBay server;
- our servers have no technical access to their content;
- we do not store, duplicate or transfer any image;
- your file names and metadata (EXIF, geolocation) remain strictly on your device.
This implementation is verifiable: open your browser's developer tools (the F12 key), the Network tab, and observe the complete absence of any outgoing request containing your image at the moment of conversion.
What we actually collect.
Although your files never reach us, your mere visit to the site generates, as with any website, certain technical data. Here, in full transparency, is what is actually collected.
Connection data (OVH server logs)
For reasons of security, technical diagnostics and in accordance with French law, our host OVH retains the following information:
- the visitor's IP address;
- the date and time of the request;
- the page visited and the HTTP response code;
- the user agent (browser, operating system).
Legal basis: legitimate interest (security of the service) and legal obligation (article L.34-1 of the French Postal and Electronic Communications Code).
Retention period: 12 months maximum.
Transparent analytics (Google Analytics 4)
We use Google Analytics 4 solely to measure audience and analyze how our interface is used in order to improve the app. Crucial distinction: GA4 analyzes your browsing but NEVER sees, receives or stores the images you convert. Your files stay strictly confined to your device.
To measure the site's audience, understand the most visited pages and improve the user experience, we use Google Analytics 4 (Google Ireland Limited, Dublin). GA4 only collects browsing data, namely:
- IP address (truncated by Google before storage);
- approximate geolocation data (country, region, city);
- device type, browser, screen resolution;
- pages visited, duration and journey on the site;
- a pseudonymous identifier stored in a cookie.
Legal basis: your prior consent, collected via the cookie banner. No analytics cookie is placed until this consent is given.
Transfer outside the EU: Google Analytics may transfer data to the United States. This transfer is governed by the EU-US Data Privacy Framework and, on a subsidiary basis, by the European Commission's Standard Contractual Clauses.
Ad network (Adsterra)
The site displays advertising to fund its free access. Our ad network is Adsterra. The banners are loaded in iframes isolated from our application.
Subject to your consent, Adsterra may place cookies or use technical identifiers in order to:
- measure ad impressions and clicks;
- limit how often the same ad is shown (capping);
- carry out contextual or behavioural targeting.
None of your converted files are shared with Adsterra. Loading the advertising iframe may, however, involve a transfer of standard browsing data (IP address, user agent, page visited) to servers potentially located outside the European Union; these transfers are governed by the appropriate safeguards provided for by the GDPR (standard contractual clauses).
Data we never collect
- your images, videos or any file placed in the converter;
- the content of your files, your EXIF metadata or the geolocation of your photos;
- personally identifying details (last name, first name, email) — unless you write to us.
Cookies and consent.
In accordance with the GDPR and the CNIL's recommendations, a consent banner is displayed from your first visit. No cookie subject to consent is placed before your acceptance. You can:
- Accept all cookies (analytics, advertising);
- Refuse all cookies that are not strictly necessary;
- Customise your choice by purpose.
Your choice is kept for a maximum of 6 months. You can change it at any time via the “Manage my cookies” link in the footer.
Categories of cookies used
- Strictly necessary
- Technical session cookie, storage of the language preference and of the consent choice. Always active, exempt from consent.
- Analytics
- Google Analytics 4 — placed only after acceptance.
- Advertising
- Adsterra ad network — placed only after acceptance.
Your rights under the GDPR.
As a resident of the European Union, you have the following rights regarding your personal data:
- Access — obtain a copy of the data concerning you.
- Rectification — correct inaccurate data.
- Erasure — request the deletion of your data.
- Restriction of processing in certain situations.
- Objection to processing (in particular for marketing purposes).
- Portability — retrieve your data in a structured format.
- Withdrawal of consent at any time.
To exercise these rights, write to contact@markovictechnologies.com. We respond within a maximum of one month.
You also have the right to lodge a complaint with the CNIL (the French data protection authority) — cnil.fr.
Security & processors.
Technical measures
- systematic TLS encryption (HTTPS);
- strict security headers (CSP, HSTS);
- no storage of user files (impossible by design);
- minimal logging, 12-month rotation.
Recipients & processors
- Hosting
- OVH SAS — France (European Union)
- Analytics
- Google Ireland Limited — Dublin, Ireland (EU). Transfers governed by the EU-US Data Privacy Framework.
- Advertising
- Adsterra — banners in an isolated iframe. Browsing data transfers possible outside the EU, under appropriate safeguards.
Changes to this policy.
This policy may be amended to reflect changes in the service or the regulatory framework. The date at the top of the document indicates the last effective update. For any question: contact@markovictechnologies.com.