Privacy Policy
Your privacy is our priority. Learn how we protect your data and respect your privacy.
Last updated: September 13, 2026
Overview
ICS File respects your privacy completely. With one clearly marked exception, all file conversions happen entirely within your web browser using client-side JavaScript. Your calendar files and personal data never leave your device, are never uploaded to our servers, and are never stored, logged, or transmitted anywhere.
The one exception: the AI “Anything to ICS” converter. That tool cannot work in your browser, because reading events out of a photo or a PDF requires an AI model. When — and only when — you use /anything-to-ics, the file you upload is transmitted to Anthropic's API for processing and discarded once the events come back. We do not write it to disk or store it in a database. Every other tool on this site is unaffected and continues to run entirely on your device.
Two things do involve us holding data about you, and both are entirely optional: creating an account, and buying a subscription or an AI conversion pack. Neither is needed to use the free tier. What each one stores is set out under “Information We May Collect” and “Accounts and Payments” below.
This Privacy Policy explains how ICS File ("we," "our," or "us") handles information when you use our website and conversion tools located at icsfile.com (the "Service"). This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.
Data We Do NOT Collect
✓ Your Calendar Data is Safe
- Calendar files: Your ICS, CSV, Excel files never leave your browser
- Event data: Meeting details, locations, dates remain on your device
- Personal information: Organizers, attendees, descriptions stay private
- File contents: No server-side processing or temporary storage
- Conversion results: Generated files are created locally
This describes every tool on the site except the AI converter — see “The AI Converter” below for how that one differs. It holds on the free tier and on Premium alike: paying for a subscription does not send us your calendar data.
How Our Technology Works
Client-Side Processing
File parsing, conversion, and generation happens in your browser using JavaScript. No data is sent to our servers during the conversion process.
Local File Access
When you upload files, they are read directly by your browser. The file data remains in your device's memory and is never transmitted.
The AI Converter
The Anything to ICS tool is the only part of this site that processes your file on a server. Extracting events from a photograph, a screenshot, or a PDF requires an AI model, which cannot run in a browser. This section applies to that tool alone.
- What is sent: the file you upload, along with your browser's time zone and today's date so that relative dates such as “next Tuesday” resolve correctly.
- Where it goes: to Anthropic's API, which processes the request and returns the extracted events. Anthropic's handling of API data is governed by their own privacy policy and commercial terms.
- What we keep: nothing from the file. It is held in memory for the duration of the request and discarded. We do not write it to disk, log its contents, or store it in a database.
- What we count: how many conversions have been run, so the allowance can be enforced — against your account if you have one, and otherwise against your IP address. See “Monthly Usage Allowance” below.
- Your control: the tool is never used unless you go to that page and upload a file. Please do not upload confidential or sensitive material to it.
If you would rather nothing left your device, every other converter on this site does the same job locally for structured inputs — CSV, Excel, JSON, and delimited text.
International Transfers
Anthropic, the provider of the AI model, processes requests on infrastructure located in the United States. If you are in the European Economic Area, the United Kingdom, or Switzerland, using this one tool means the file you upload is transferred outside your region. That transfer relies on the standard contractual clauses in Anthropic's commercial terms. No other tool on this site transfers your file anywhere.
Legal Basis (GDPR)
- Processing your uploaded file: performance of a contract — you asked us to convert it. Processing begins only when you choose to upload, and stops when the result is returned.
- The conversion counter: legitimate interest in preventing abuse of a paid service and keeping a free tier available for everyone. Where you have an account, it is also necessary for the performance of our contract with you, since the allowance is part of what your plan provides.
Accounts and Payments
None of this applies unless you choose to create an account or buy something. Browsing the site and using the free tier requires neither.
Legal Basis (GDPR)
- Your account record and subscription status: performance of a contract. We cannot give you what you paid for without knowing who you are and what you bought.
- Payment processing: performance of a contract, carried out by Paddle as merchant of record. Paddle is an independent controller for the payment data it holds, not our processor.
- Billing and tax records: compliance with a legal obligation. Financial records must be kept for a statutory period even after an account is deleted.
- Authentication rate limits: legitimate interest in protecting accounts from password-guessing attacks.
International Transfers
Paddle and our hosting and database providers operate infrastructure outside the European Economic Area, including in the United States. Those transfers rely on the standard contractual clauses in each provider's terms.
Marketing
We do not send marketing email and we do not sell, rent, or share your email address with anyone. The only emails we send are the ones the account needs: verification, password reset, and replies to messages you send us. Receipts and renewal notices come from Paddle.
Information We May Collect
Website Analytics
We use Google Analytics to understand how visitors use our website. This includes:
- Page views and session duration
- General geographic location (country/region level)
- Device type and browser information
- Referring websites and search terms
This data is aggregated and anonymous. It does not identify you personally and does not include any file content or conversion data.
Tool Usage Counters
When a conversion completes, the tool reports two numbers to our own server: which tool was used, and how many calendar events it processed. This tells us which tools are worth maintaining and what file sizes to support. It is deliberately incapable of carrying anything else — the server accepts a tool name from a fixed list and integers, and rejects everything else.
- No file names, file contents, or event details are ever sent
- No identifier ties a count to you or to your session
- Counts are aggregated across all visitors, never per-person
Monthly Usage Allowance
So that the free tier can have a limit at all, we count how many calendar events and AI conversions have been run. What that count is filed under depends on whether you have an account:
- Without an account: against your IP address, so the allowance follows the connection rather than a person.
- With an account: against your email address, so the allowance follows you between devices. Usage already recorded for your IP address is carried over on sign-in, which is what stops the limit being reset by signing in or out.
In every case the stored value is a number — never a file name, file content, or event detail.
Account Information
An account is only needed for Premium or to buy AI conversion packs. If you create one, we store:
- Your email address — for sign-in, receipts, and support
- A bcrypt hash of your password, if you registered with one. We never store the password itself and cannot recover it.
- Your subscription status, plan, renewal date, and Paddle subscription and customer identifiers
- Your monthly usage counts and any purchased conversion balance
- The time you last signed in
If you sign in with Google or GitHub instead, we receive your email address and display name from that provider and store the same record. We do not receive your password or any other data from them.
Payment Information
We never see your card details. Payments are processed by Paddle.com, which is the merchant of record for every purchase on this site. Card numbers, billing addresses, and tax identifiers are entered into and held by Paddle — they do not pass through our servers.
What we receive back from Paddle, and store, is limited to: your email address, a Paddle customer and subscription identifier, the plan you bought, its status, and its renewal date. That is what lets the site know whether your account is Premium.
Paddle's own handling of your data is governed by Paddle's Privacy Policy. For an invoice, a receipt, or a question about a charge, you can also contact them directly at paddle.net.
Contact Information
If you contact us via email, we will store your email address and message content only for the purpose of responding to your inquiry. We do not use this information for marketing purposes.
How Long We Keep Things
| Data | Retention |
|---|---|
| Your calendar files and their contents | Never stored. Browser tools never send them; the AI tool holds the file in memory for the request only. |
| Monthly usage counts (account or IP address) | About two months, then deleted automatically |
| Account record (email, password hash, subscription status) | For as long as the account exists. Deleted within 30 days of you asking us to close it. |
| Purchased AI conversion balance | Until spent or the account is closed. It has no expiry date of its own — you paid for it. |
| Billing and tax records | Held by Paddle as merchant of record, for the period their legal and tax obligations require — typically seven years, and independently of whether you close your account with us |
| Email verification and password reset tokens | 24 hours and 1 hour respectively, and single-use |
| Aggregate tool usage counts (not per-person) | Daily breakdowns expire after roughly two years; lifetime totals are kept indefinitely |
| Google Analytics data | Per Google's retention settings |
| Emails you send us | Kept only as long as needed to answer you |
Cookies and Local Storage
We use minimal cookies and browser storage:
Essential Cookies
- Website functionality and performance
- User preferences (theme, language)
- A sign-in session cookie, set only if you create an account. It keeps you signed in and is cleared when you sign out.
- Cookies set by Paddle during checkout, only while you are buying something
Analytics Cookies
- Google Analytics tracking
- Performance measurement
- Usage statistics
Data Security
For every tool other than the AI converter, your calendar data never leaves your device and is therefore inherently secure. Additionally:
- Our website is served over HTTPS encryption
- No permanent storage of any file data on our servers
- No backup or temporary file creation on our infrastructure
- Regular security updates and monitoring
- Passwords are stored only as bcrypt hashes, never in a readable form. We cannot see your password, and a copy of our database would not reveal it.
- Sign-in and password-reset attempts are rate limited, and reset links are single-use and short-lived
- We hold no card details at any point — they go directly to Paddle and never touch our servers
Your Privacy Rights
Under GDPR, CCPA, and other privacy laws, you have rights regarding your personal information:
GDPR Rights (EU)
- Right to access your data
- Right to rectification
- Right to erasure
- Right to data portability
- Right to object to processing
CCPA Rights (California)
- Right to know what data is collected
- Right to delete personal information
- Right to opt-out of data sales
- Right to non-discrimination
To exercise these rights, contact us at icsfile@protonmail.com. If you have an account, email us from the address on it so we can be confident it is you. We aim to respond within 30 days, and since we hold very little, most requests can be handled straight away.
One honest limitation: deleting your account does not delete the billing records Paddle must keep to satisfy its own tax and accounting obligations. Those requests go to Paddle, and we will point you to the right place.
Everything else we hold is either your account record, an aggregate and person-free count, or an email you chose to send us.
Third-Party Services
We use minimal third-party services. These are all of them:
Anthropic — AI conversion only
Provides the model behind the Anything to ICS tool. Receives the file you upload to that tool, and nothing else. Not contacted at all unless you use that tool.
Paddle — payments
Merchant of record for every purchase on this site. Receives your email address, card or payment details, and billing country; handles the charge, the receipt, and any sales tax or VAT. Not contacted at all unless you buy something.
Google and GitHub — optional sign-in
If you choose to sign in with one of them, they tell us your email address and display name so we can create your account. We never receive your password, and neither provider is contacted unless you pick that sign-in option.
Resend — account email
Delivers the transactional emails an account needs: address verification and password resets. Receives your email address and the contents of those messages. Not used for marketing, because we do not send any.
Upstash — usage counters and accounts
Hosts the database holding aggregate tool usage counts, per-account allowances, and account records. It never receives file contents or event data.
Vercel — hosting
Serves this website and runs the AI conversion endpoint. As with any web host, it processes standard request data such as IP addresses for delivery and security purposes.
Google Analytics — website usage
We use Google Analytics to understand website usage. Google may use this data according to their privacy policy.
You can opt-out by installing the Google Analytics Opt-out Browser Add-on.
Children's Privacy
Our Service is not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the new policy on our website. Changes are effective immediately upon posting.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Email: icsfile@protonmail.com
Website: icsfile.com
We typically respond to privacy inquiries within 48 hours.