1. Information Collection
We collect the following information:
- Registration data: username, email, password (hashed)
- Usage data: IP addresses, browser type, access times
- Files: metadata of uploaded files (name, size, date)
- Payment information: processed through the Crypto Bot payment service
2. Use of Information
We use the collected data to:
- Provide and improve our services
- Process payments and manage accounts
- Communicate with users (support, updates)
- Ensure security and prevent fraud
- Analyze service usage to improve functionality
3. Data Protection
We apply the following security measures:
- AES-256-GCM encryption of file contents on disk
- SSL/TLS encryption for data in transit
- Password hashing using bcrypt
- CSRF tokens on forms and session cookies flagged HttpOnly, Secure and SameSite
- Optional two-factor authentication (TOTP) with recovery codes
4. File Storage
Your files are stored encrypted: only ciphertext is written to disk, and the encryption key is kept separately from the database. Decryption happens on the server at the moment a file is served through your link, which means the service is technically able to read file contents — this is not end-to-end encryption. Files are kept until you delete them or close your account.
5. Cookies and Tracking
We use cookies to maintain sessions and improve user experience. You can disable cookies in your browser settings, but this may limit site functionality. We do not use third-party advertising trackers.
6. Third-Party Data Sharing
We do not sell your data. We may share data only with:
- Payment processors for payment processing
- The email delivery provider used to send confirmation and notification messages
- As required by law or court order
7. Your Rights (GDPR)
Under GDPR you have the right to:
- Access: request a copy of your data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data
- Portability: receive data in a machine-readable format
- Objection: object to data processing
8. Account Deletion
You can delete your account at any time in settings. When you delete your account, all your files and personal data will be deleted within 30 days. Backups are deleted within 90 days.
9. Children
Our service is not intended for persons under 16 years of age. We do not knowingly collect personal data from children. If you learn that a child has provided us with personal information, please contact us.
10. Policy Changes
We may update this Privacy Policy. We will notify you of significant changes by email. The date of the last update is indicated at the top of the page.
11. Contact
For privacy questions, contact us: