Privacy
Last changed
What is kept about you, who else handles it, what other people can see, and how to remove it.
This is a draft. It describes how the service works today and has not yet been agreed as the legal text.
What is kept
- Your account: your email address, your username, and the name and description you choose to show. Your password is kept only as a hash, which cannot be turned back into the password.
- Your second factor, if you set one up: the secret an authenticator app shares with us, encrypted, or the phone number codes are sent to.
- Your files, and for each its name, size, type and where you put it.
- What you post on the Exchange, and what you like and whom you follow there.
- How much you use, by day: how much you hold, and how much was uploaded, downloaded and asked of the API. This is what limits and bills are worked out from.
- Your plan, and a reference to you at Stripe if you have paid. Card details are held by Stripe and never reach FileFreak.
- Addresses on the network, briefly, to limit how often one place can try to sign in or send a form, and in the storage provider's request logs, which are read to measure downloads and are removed on a schedule.
- Reports and messages: what you write in a report or to support, and the email address you give with it.
What is not done
Your files are not read to learn about you, and nothing about you is sold. There is no advertising here and no tracking by other companies. The only cookies are ones the site needs to work, such as the one that keeps you signed in and the one that remembers light or dark.
Who else handles it
- Microsoft Azure runs the service, stores the files and sends the emails and text messages.
- Stripe takes payments.
- Google, only if you choose to sign in with Google, and then only to confirm who you are.
What other people can see
Nothing, until you choose. A share link shows one file or folder to whoever holds the link. Making something public shows it to anybody, on your public page, beside your username and the name you chose. Posts on the Exchange are public. You can switch your public page off in Settings, which hides all of it at once.
How long it is kept, and removing it
Your files are kept until you delete them. Deleting your account, in Settings, removes your files from storage and your profile, posts, share links and keys with them.
Some things outlast an account, without your name on them: a report somebody made about something of yours, a message you sent to support, and the record of what was charged.
To ask about any of this, write through the support page.
Still to be written
- Who is responsible for this information: the legal name and address of whoever runs FileFreak, and how to reach them about it.
- Your rights under the law where you live, and how to use them.
- Where the information is held, and what that means if you are in another country.
- How long billing records are kept.