Privacy Policy
Last updated: September 2026
What we collect
- Account data: the administrator's name, email address and hashed password.
- Uploaded files: the file itself plus metadata you provide (file name, description, version), its size, type, upload date and download counts.
- Contact messages: anything you send us through the contact form.
- Security logs: IP addresses may be temporarily recorded to enforce rate limits against abuse (failed logins, mass uploads). These entries expire automatically.
- Malware scanning: when VirusTotal scanning is enabled, file hashes are sent to VirusTotal to check for malware; files unknown to VirusTotal (under 32 MB) may be uploaded there for analysis.
Cookies
- An essential session cookie keeps you logged in.
- An essential CSRF token protects forms against forgery.
- When advertising is enabled, third parties (including Google) may place and read cookies on your browser, or use web beacons or IP addresses to collect information as a result of ad serving on this website. See How Google uses data when you use our partners' sites or apps.
How we use your data
- To run the service: accounts, uploads, downloads and administration.
- To keep the service safe: abuse prevention, malware scanning and copyright enforcement.
- To respond to messages you send us.
We do not sell your personal data. We share it only when legally required (for example, a valid court order) or with service providers needed to operate the site (hosting provider, Google Drive when Drive storage is enabled).
Your rights
You can delete your files at any time from your dashboard. To delete your account and all associated data, contact us via the contact form.
Data security
Passwords are stored hashed, uploaded files are stored under random names with direct web access blocked, and downloads require a one-time token. No security measure is perfect; contact us if you notice anything suspicious.