Privacy Policy
Last updated: November 21, 2025
Your privacy is critical. We collect only what is necessary to provide our storage service and ensure the security of your data.
Who We Are
For the purposes of the General Data Protection Regulation (GDPR), the Data Controller is:
Email: [email protected]
As a company based in Germany, we strictly adhere to the General Data Protection Regulation (GDPR) of the European Union.
Data We Collect
We collect information in the following categories:
- Account Information: When you sign up via Clerk, we store your email address, username, and profile picture URL.
- Usage Data: We log API requests, bandwidth usage, storage volume, and IP addresses for security and billing purposes.
- User Content: The files you upload. We store these files securely but do not access their contents unless required by law or to scan for illegal content (e.g., CSAM hashes).
- Payment Information: All payments are processed by Paddle.com. We do not store your credit card details. We only store a Customer ID and Subscription status.
Subprocessors (Third Parties)
To provide our service, we use trusted third-party providers. We have Data Processing Agreements (DPAs) in place with all of them.
Data Storage & Security
Your files are stored on high-durability object storage encrypted at rest (AES-256). Metadata is stored in our database encrypted in transit (TLS 1.3) and at rest.
While our primary infrastructure is in the EU (Germany/Central Europe), our CDN (Cloudflare) may cache encrypted chunks of your public files globally to ensure performance.
Your Rights (GDPR)
You have the right to:
- Access: Request a copy of all data we hold about you.
- Rectification: Correct inaccurate data (you can do this in your Dashboard).
- Erasure: Request deletion of your account and all associated files ("Right to be forgotten").
- Portability: Download your files and metadata in a machine-readable format.
To exercise these rights, email us at [email protected].
Cookies
We use only essential cookies necessary for Authentication (keeping you logged in) and Security (preventing CSRF attacks). We do not use third-party tracking pixels or advertising cookies.
Contact Us
If you have any questions about this Privacy Policy, please contact our Data Protection Officer at: