Privacy Policy.

§ 01

What we collect

• Account email and a one-way password hash (bcrypt) — for registered users.
• Uploaded file content, original filename, size in bytes, and SHA-256 fingerprint.
• Uploader IP address for every upload (anonymous and authenticated).
• Downloader / share-page-viewer IP address for every successful file download and every share-page resolution. Stored append-only in the analytics event tables that power the owner's Feed dashboard rollups (see § 02 for retention).
• Recipient email addresses for share-by-email links — supplied by the file owner when sharing a file via email (see § 04c).

§ 02

How long we keep it

• Account-owned files: until you delete them or your account.
• Anonymous uploads: file content is purged after 7 day(s) (configurable; matches the backend default of 7 days).
• Forensic record (uploader IP, SHA-256 hash, original filename, size): retained for 180 days after content purge for abuse-investigation purposes.
• Analytics events (download events, share-page views): currently retained append-only without rotation. Production deployments will introduce a retention sweep that aggregates older rows into monthly summaries.
• Share-email recipient addresses: retained for the share's lifecycle — purged automatically when the share is revoked by the owner, the file is deleted, or the owner's account is deleted.
• Abuse reports (DMCA, ILLEGAL, SPAM, OTHER): retained indefinitely for legal record-keeping.

§ 03

Why we collect IP addresses

Two purposes. Fraud and abuse prevention (rate limits, abuse-report investigation, protection from automated abuse) under GDPR Article 6(1)(f) — legitimate interest. Owner-side analytics for the Feed dashboard (the file owner sees aggregate download / share-view counts on their own files); event rows carry the IP for forensic continuity but the dashboard itself only shows totals, never IPs. Neither use case involves selling or sharing data with marketing partners.

§ 04

Cookies and advertising

Share pages may display Google AdSense advertisements when you have given consent via the cookie banner. Your consent choice is recorded in your browser's localStorage under the key ads_consent. Rejecting consent does not affect downloads or any other functionality.

§ 04b

Payment processing

When you upgrade to the paid tier, payment is processed by Stripe, a contractually-bound subprocessor (PCI-DSS Level 1 certified). Your account email is shared with Stripe at checkout time as part of payment processing — Stripe needs it to issue receipts and to match returning customers to their existing payment methods. Card and bank-account details are entered on Stripe-hosted pages and never reach our servers. We only store the resulting Stripe customer and subscription IDs alongside the period-end timestamp so the app knows whether your subscription is currently active.

The legal basis for sharing your email with Stripe is GDPR Article 6(1)(b) — performance of the subscription contract you entered into when upgrading.

§ 04c

Share-email recipients

When a file owner uses the share-by-email feature, share links are emailed to the recipient addresses the owner supplies. Those recipient email addresses are stored by us to power per-recipient open/download tracking — so the owner can see which recipients have accessed the shared file.

The legal basis for processing recipient addresses is GDPR Article 6(1)(f) — legitimate interest of the file owner in knowing whether their shared content was received and accessed.

Recipient addresses are retained for the share's lifecycle and are purged automatically when the share is revoked by the owner, the file is deleted, or the owner's account is deleted. Recipients may contact us to request erasure of their address at any time (see § 06 for contact details).

§ 05

Your rights

• Access — request a copy of the personal data we hold about you.
• Deletion — request that we erase your account and uploads.
• Correction — ask us to fix inaccurate data.
• Complaint — lodge a complaint with your national supervisory authority.

§ 06

Contact

For privacy questions or requests under the rights above, contact privacy@filemv.local. (Placeholder address — replaced with the operating company's contact at launch.)