Privacy Policy

Files

Uploaded files are stored on the server in a non-public directory under random names. They are deleted permanently when they expire, reach their download limit, or are deleted by the owner or an administrator. Deleted-document records (title, dates and status, no file) are kept for 30 days so links can show a proper status.

Analytics

For documents with analytics enabled we record the event type, time, referring website, coarse device category (mobile/tablet/desktop) and country when provided by the hosting network. We do not store IP addresses. Event data is deleted after 90 days or when the document record is purged.

IP addresses & rate limiting

To limit abuse, a keyed one-way hash of your IP address is kept for up to 48 hours. It can’t be reversed into your IP.

Cookies

Visitors who only open or download shared links receive no cookies. A session cookie (strictly necessary) is set on the upload, management, contact and admin pages for security (CSRF protection and sign-in).

Passwords

Management passwords are stored only as salted hashes.

Third parties

No third-party analytics, fonts, scripts or storage services are used.

Contact

Privacy questions: support@example.com.