Privacy
Short version: your project is converted and deleted in the same request, and nothing about it is kept.
Your project
When you convert a project, the .aep, .aepx, .prproj or .ecproj file is uploaded over an encrypted connection and written to a temporary folder on our server. The converter reads it, builds the .ecproj, .fcproj or After Effects script (.jsx), and keeps the result in the server's memory for up to 15 minutes so that your page can pick it up again if your phone switches apps or the page reloads. The temporary folder with the upload is deleted as soon as the conversion ends, and the result is erased from memory after 15 minutes at the latest. It is reachable only with a random code that your page holds. We don't keep copies on disk, we don't look at projects, and we don't use them for anything else.
Footage, images and audio are never uploaded: only the project file. The converted project contains the file paths stored in your project so that EffectCraft or FilmCraft can find your footage again; those paths are not stored on our side.
If you fill in your project folder, that path (which may include your user name) is written into the converted project so the Craft app can find your files, and is used only for that conversion: it isn't stored or logged.
Technical data
To stop abuse, the server counts conversions per IP address for one hour, in memory only. Our hosting provider (Railway) may keep standard access logs (IP address, time, page requested) for security and for a limited time. Legal basis: our legitimate interest in keeping the service secure and available.
Usage counts
To know how many conversions work, each one leaves a single anonymous line in the server's log: which converter, whether it succeeded, and how many seconds it took. It holds no address, no file name and nothing from your project. If you accept statistics, the same events (conversion started, finished, downloaded) also go to Google Analytics, with the converter's name only.
Feedback
After a conversion you can tell us how it went. If you do, we receive by email the choices you ticked, your note, your email address if you chose to give it (only to reply to you), the converter you used and a few counters (how many notes the report had). We never receive your project, its layers, file names or paths. We don't keep feedback in the site; it lives only in our mailbox, and we delete messages once they have been dealt with. The email is sent through Resend, our email provider. Legal basis: your consent, given by sending the form.
Cookies, statistics and advertising
Craft Converter has no account or login and sets no cookies of its own for tracking. When you first visit, a message asks for your choice, with "Accept all" and "Reject all" side by side and a "Choose" button for each purpose. Closing the message with the cross counts as a refusal. Until you agree, nothing from Google Analytics or Google AdSense is loaded: your browser doesn't contact them.
- Necessary (no consent needed): a note in your browser's local storage that remembers your choice (name
cc-consent, kept for 6 months); a temporary note that lets a conversion survive a page reload or a switch of app (session storage, erased when you close the tab); and the date a support card was dismissed (kept for 2 weeks). None of them identifies you or leaves your device. - Statistics (only if you accept): Google Analytics, with cookies named
_gaand_ga_…(up to 2 years). It counts visits, pages, country, how visitors arrived, and the conversion events above. It never sees your project files. Provider: Google Ireland Limited / Google LLC. - Advertising (only if you accept): Google AdSense. Google and its advertising partners may set cookies and identifiers on your device to show and measure ads, including personalised ads, and to prevent fraud. Their lifetimes are set by Google.
You can change or withdraw your choice at any time, as easily as you gave it, with "Cookie settings" at the bottom of every page. If you withdraw it, the page reloads and the cookies set by us are deleted; Google's cookies on other sites are managed in your browser. We ask again after 6 months. If your browser sends a Global Privacy Control signal we treat it as a refusal of statistics and advertising, and we don't show the message unless you open the settings yourself.
The page fonts are served from this site, so opening a page sends nothing to Google Fonts. Buy Me a Coffee, if you follow the support link, is a separate site with its own policy.
See how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites, and manage personalised ads at adssettings.google.com.
Support
If you choose to support the site, the link to Buy Me a Coffee opens that service in a new tab. Payment and any data you give there are handled by Buy Me a Coffee under its own terms and privacy policy; we do not receive your card or personal details, only the payment notice that service sends to the site owner.
Who runs the site
Craft Converter is run by Federico Geniale, who is also the data controller. Contact: federico.geniale2006@gmail.com
Who receives data, and where it goes
Hosting: Railway Corp. (servers may be outside the European Economic Area, in the United States). Statistics and advertising: Google, only after your consent. Feedback email: Resend. These providers act on our behalf or under their own terms, and transfers outside the EEA rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework or on standard contractual clauses. We do not sell personal data.
How long we keep data
Projects: erased at the end of the conversion; results: 15 minutes at most, in memory. The hourly conversion counter: one hour, in memory. Hosting logs: a limited time set by the host. Feedback: until dealt with. Statistics: the period set in our Google Analytics account (no more than 14 months). Your cookie choice: 6 months, in your browser.
Your rights (Europe, UK, Switzerland)
You have the right to access your data, have it corrected or erased, restrict or object to its use, receive it in a portable form, and withdraw consent at any time without affecting what happened before. You can also lodge a complaint with your data protection authority; in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it). Since we keep no personal data beyond what is described above, there is usually nothing to access or delete. To exercise a right, write to federico.geniale2006@gmail.com; we reply within one month.
Your privacy rights (United States)
If you live in California or another US state with a privacy law (for example Virginia, Colorado, Connecticut, Texas, Utah), you can ask to know, access, correct or delete personal information, and you can opt out of "sale" and of "sharing" or targeted advertising. We do not sell personal information for money. Advertising cookies from Google can count as "sharing" or targeted advertising under those laws, so they are off until you accept, you can opt out at any time with "Cookie settings" at the bottom of every page, and a Global Privacy Control signal from your browser is honoured automatically. We will not discriminate against you for using these rights. To make a request, write to federico.geniale2006@gmail.com. We do not knowingly collect personal information from children under 16, and the site isn't aimed at them.
Changes
We update this page when something changes, and the date below with it. Last updated: 29 October 2026.