Legal

Privacy Policy

Last updated: October 2026

What we collect

When you upload a file, we collect your email address (for verification only), the file metadata (name, size, type), and your IP address (for rate limiting, abuse prevention and anonymised usage statistics). We do not create accounts or track you across sessions.

How we use your data

Your email is used solely to send you a verification link. We do not send marketing emails, sell your data, or share it with third parties. IP addresses are used only for rate limiting, abuse prevention and anonymised usage statistics. Uploads may be reviewed by sampling to detect and prevent abuse.

Data retention

Uploaded files are automatically deleted after 7 days. Email addresses are retained for a maximum of 30 days and then permanently deleted. Unverified uploads are purged within 1 hour.

After a file is deleted or expires, we keep anonymous upload details: the file name, type, size, timing, download count, a one-way hashed network identifier and a short generic description of what kind of file it was (for example a photo album or a spreadsheet), never its contents. We use these to understand how the service is used and to prevent abuse. They contain no email address and no readable IP address, and the file contents themselves are always deleted.

Where your data is stored

Files are stored with our cloud infrastructure providers in the United States. Data is encrypted in transit via TLS and at rest.

Your rights

Under GDPR and POPIA, you have the right to request deletion of your data at any time. Contact [email protected] for any data-related requests.

Contact

For privacy concerns, reach us at [email protected]. For abuse reports, contact [email protected].