Privacy Policy – Local Processing, No Uploads

Effective date: September 18, 2026. This privacy policy describes how M3U8to (“we”, “us”), the operator of m3u8to.com, handles information in connection with the m3u8 to MP4 converter, the m3u8 downloader, and the M3U8to Chrome extension. The short version: your playlists and videos never leave your device — the tools on this site do their work in your browser, not on our servers.

The core principle: local processing

Every conversion offered on this website happens client-side. When you paste an m3u8 URL into the converter or downloader:

Your browser fetches the playlist file directly from the video’s own server.
Your browser downloads the .ts video segments straight from that server’s CDN into your device’s memory.
Your browser merges those segments into a single MP4 file locally, and the file is saved from your browser to your own device.

At no point in that pipeline does the video, the playlist, or any derivative of them pass through an M3U8to server. We physically cannot see, log, or store the videos you convert, because the data never reaches us.

Information we do not collect

The m3u8 URLs you paste. They are read and processed by JavaScript running in your tab. They are not transmitted to us.
Video or audio content. Converted and downloaded files are assembled on your device and saved by your browser. No copy is retained by us.
Account information. The site has no registration, no login, and no paid plans, so there are no names, email addresses, or payment details tied to an account — because there are no accounts.
Conversion history. We do not track which videos were converted, when, or how often.

Information that is processed automatically

Like nearly every website, m3u8to.com is served through a hosting provider (currently Vercel Inc.), whose infrastructure keeps short-lived technical request logs for security and abuse prevention. These logs may include your IP address, the type and version of your browser and operating system, the date and time of your request, and the specific page requested. This data is used only to deliver the site, diagnose faults, and defend against attacks such as denial-of-service. It is not used to profile you, is not combined with any conversion activity (which we never see), and is deleted on the hosting provider’s standard retention schedule.

Cookies and local storage

m3u8to.com sets no advertising cookies and loads no third-party advertising or tracking scripts. If a small preference (for example, your last-used settings in the downloader) is ever stored, it is kept in your browser’s local storage on your own device, is never transmitted to us, and can be cleared at any time through your browser settings.

The M3U8to Chrome extension

When the M3U8to browser extension becomes available, this policy will be updated with a dedicated section before launch. Our design commitment is the same as for the website: captured stream URLs and downloaded media stay on your device, the extension requests only the browser permissions strictly needed to detect and download HLS streams on the page you are viewing, and no captured data is sold, shared, or transmitted to us for any purpose unrelated to performing the download you requested.

Direct connections to third-party video servers

One point deserves emphasis because it is sometimes misunderstood: when you convert an m3u8 link, your browser contacts the video’s own hosting server directly. That server (or its CDN) necessarily sees your IP address and request — exactly as it would when you simply watched the video online. That traffic is between you and that provider, governed by their privacy policy, not ours. We have no visibility into it and no relationship with those providers.

Legal bases (GDPR)

For visitors from the European Economic Area and the United Kingdom: the automatic technical logs described above are processed on the legal basis of legitimate interest (Art. 6(1)(f) GDPR) — namely, operating a secure and reliable website. Because no account exists and no conversion data reaches us, we do not sell or share personal data with data brokers, advertisers, or analytics vendors, and there is no profiling or automated decision-making.

Your rights

Depending on where you live, you may have rights of access, rectification, erasure, restriction, portability, and objection with respect to personal data. Since we do not maintain account records or conversion histories, the practical scope of a request will usually be limited to the technical logs described above. To exercise any right, contact us at [email protected] and we will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

Children’s privacy

The services are not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children, and — because no accounts or uploads exist — we have no mechanism to do so. If you believe a child has provided us with personal data, contact us and we will delete it.

Security

The site is served exclusively over HTTPS, encrypting traffic between your browser and our hosting provider. Because video data is never stored on our side, the most sensitive information involved in a conversion is, by design, not exposed to any breach of our infrastructure. No method of transmission over the Internet is 100% secure, but the local-first architecture minimizes what could ever be at risk.

Changes to this policy

We may update this privacy policy as the services evolve — for example, when the Chrome extension launches. Material changes will be reflected by updating the effective date at the top of this page, and the current version will always be available at this URL.

Contact

Questions about this policy or about how M3U8to handles data? Email [email protected].