Security

Last updated: October 6, 2026

Found a security issue? Please report it responsibly to pdfconvertnet@gmail.com. We take security reports seriously and aim to acknowledge reports within 48 hours.

At PDFConvertNet, the security and privacy of our users' data is a priority. We take reasonable technical and organizational measures to protect the files and information entrusted to us, and we welcome reports from security researchers and users who help keep the Service safe.

1. How We Protect Your Data

We use security practices designed to protect information handled through the Service, including:

  • HTTPS/TLS encryption - Traffic between your browser and our servers is encrypted in transit using HTTPS/TLS.
  • Secure password hashing - Passwords are not stored in plain text and are protected using password-hashing mechanisms appropriate for account security.
  • Automatic file cleanup - Temporary uploads and intermediate processing files are automatically scheduled for deletion within 1 hour.
  • Restricted access - User files are not routinely opened or manually reviewed. Access may occur where reasonably necessary for security, support, troubleshooting, legal compliance, or operation of the Service.
  • Session security - Secure session cookies and related security controls are used to help protect accounts from unauthorized access.

For details about what data we collect and how we handle it, please see our Privacy Policy.

2. Reporting a Security Issue

If you discover a vulnerability or have a security concern, please report it responsibly. We appreciate the efforts of security researchers and users who help improve the safety of PDFConvertNet.

Contact

Send your report to: pdfconvertnet@gmail.com

We aim to acknowledge security reports within 48 hours.

What to Include

To help us investigate quickly, please include:

  • A clear description of the issue.
  • Steps to reproduce the issue (screenshots or a proof-of-concept are helpful).
  • The potential impact, as you understand it.
  • Your contact information (if you would like updates on the fix).

3. Responsible Disclosure

We ask that you:

  • Give us reasonable time to investigate and fix the issue before publicly disclosing it.
  • Do not access, modify, or delete data that does not belong to you.
  • Do not disrupt our services or the experience of other users while testing.
  • Do not use social engineering, phishing, or physical attacks against our users or staff.

We generally do not pursue legal action against security researchers who act in good faith and follow this policy. This does not limit any rights or remedies available to us where necessary to protect our users, systems, or legal interests.

4. Scope

The following are in scope for security testing:

  • pdfconvertnet.com and its subdomains
  • The PDFConvertNet web application (login, conversion tools, account features)

The following are out of scope:

  • Denial of Service (DoS/DDoS) testing
  • Spam or social engineering attacks
  • Automated vulnerability scanning that generates excessive traffic
  • Third-party services we integrate with (report issues to those providers directly)

5. What We Do Not Offer

We are a small, independently-run project. We do not currently operate a paid bug bounty program. However, we appreciate security reports and may credit researchers, with their permission, for valid and responsibly disclosed findings.

6. Account Security Tips

To help keep your own account safe:

  • Use a unique password that you do not reuse on other websites.
  • Use a password manager to generate and store strong passwords.
  • Be cautious of emails that ask for your password or OTP code. PDFConvertNet will not ask you to send your password by email.
  • Log out from shared devices.

7. Contact

For security-related questions or to report a vulnerability, contact us at:

pdfconvertnet@gmail.com

For general questions, use our Contact page.