Privacy Policy.

Operator: [Legal operator name] — pending. Effective date: [Pending operator approval]. Privacy questions: [Privacy email] — not configured.

Account data includes email address, username, a salted password hash, authentication sessions and security settings. Session records include client IP address and user-agent information. Passwords are hashed with Argon2id.

Hosting data includes uploaded files, metadata, folders, remote-upload URLs, storage usage and processing status. Playback and download activity, IP-related security and fraud signals, earnings and payout records support delivery, abuse prevention and account reporting. Support and copyright submissions contain the information you provide.

The website uses authentication cookies and browser storage for features such as resumable uploads. The developer console keeps an entered Legacy API key in session storage for the current browser tab session; clear it after using a shared device.

Embedded players and advertising integrations may involve additional browser storage or tracking. This draft does not claim that the service is tracking-free or that a consent mechanism is implemented.

Depending on deployment and enabled features, data may be processed by storage and CDN providers, SMTP email delivery, Cloudflare Turnstile, advertising providers and Google Fonts. Playback, security challenges, ads and font loading can send requests directly from your browser to those providers.

The operator must confirm provider identities, processing locations, contractual arrangements and any applicable consent requirements before finalizing this policy.

Free-account files with no completed views become eligible for inactivity pruning after a configurable interval, which defaults to 60 days and can be disabled. Active Premium files are excluded from this inactivity pruning.

Unreferenced stored objects become eligible for garbage collection after a configurable grace period, which defaults to 24 hours. Eligibility is not a promise of immediate or complete deletion. Expired or abandoned upload sessions are swept; expired or revoked account sessions are deleted after a day. Sent or abandoned mail-outbox records are deleted after 30 days.

Retention for operational logs, backups, earnings records and complete account erasure is not yet specified. The operator must publish those rules and a verified request process; this draft does not promise an erasure deadline.

Use support or the privacy contact above for data questions. Do not send passwords, API keys, recovery codes or private signed download URLs. Available rights and handling procedures require operator confirmation.