Privacy Policy

The short version: we collect what we need to run the Service, we don’t sell it, and the site has no ads and no third-party trackers.

What we collect

• Account details: username, email address, password (stored only as a salted hash), plan, and the profile information you choose to add (display name, bio, picture, public SSH keys).
• Content: files, photos, albums, organization sites and messages you create, and basic details about them (names, sizes, hashes, dates, ratings).
• Billing: payments are handled by Stripe. We keep your Stripe customer and subscription identifiers and your plan history. We never see or store full card numbers.
• Technical data: IP address, browser, and request logs, used for security, abuse prevention, rate limiting and fixing problems. Logs are kept for a limited time.
• Moderation records: reports, takedown notices, and the actions taken, including an audit log of administrative actions.

Image uploads and safety checks

Every image you upload that is not end-to-end encrypted (photos, images you host as files, and profile pictures) is hashed when it arrives. We work out an exact fingerprint of the file (SHA-256) and a perceptual fingerprint that stays similar when a picture is resized or recompressed, and we store both together with your account, the IP address the upload came from, and the time. We do this for safety and legal purposes: to keep known illegal or abusive material from being hosted, to handle reports and takedown notices, and to respond to valid legal process. An upload that matches material on our known-bad list is held back from view and checked by a person, and the account may be suspended.

We keep these records for 12 months after the upload. Records tied to material on the known-bad list, held for review, reported, taken down or removed by a moderator are kept for as long as the law or an investigation requires. Deleting your account does not remove these records early; they are kept for the same period.

The fingerprints cannot be turned back into your picture. Files in the encrypted vault, attachments in end-to-end encrypted chat rooms and end-to-end encrypted direct messages are never hashed or logged this way: we cannot read them and we do not try to. Separately, we may refuse uploads (only uploads) that come from addresses on a block list, such as known VPN or Tor exit addresses; browsing, downloading and messaging are not affected. When an upload is refused for that reason we log the account, the IP address, which kind of upload it was and the time, and keep that log for 30 days.

Support chats and tickets

Paid members can talk to an AI support assistant. What you type in that chat is sent to Anthropic, which runs the AI model, so that it can answer. We send the help guides and your recent messages with it, never your password or keys, and you should not type those. We keep your support chats for 90 days and then delete them. If a support ticket is made, a copy of the chat is attached to the ticket so our staff can read it, and that copy stays with the ticket, so it is kept after the chat itself is deleted. Your account email address is sent to Anthropic with your messages. Staff replies are announced by email, which never contains the reply itself.

What we use it for

To provide and secure the Service, take payment, send you service emails (confirmations, password resets, receipts and important notices), prevent abuse, enforce our policies, and meet legal obligations. We don’t use your content for advertising, and we don’t sell personal data.

Who else sees it

• Other people: only what you make public or share: your public profile, public files and photos, organization pages, and messages in rooms you’re in.
• Service providers: Stripe (payments); and our hosting and email infrastructure. They process data for us and only as needed.
• Authorities: when required by law or valid legal process, to report child sexual abuse material, or to protect people or the Service. We may keep evidence of illegal content for the period the law or an investigation requires.
• Contact-form messages on an organization’s site are delivered to that organization’s admins.

Cookies

We use only the cookies the site needs: a session cookie to keep you logged in and a security token to protect forms. No advertising or analytics cookies.

Keeping and deleting data

We keep your data while your account is open. You can delete files, photos and your account yourself; deleted content is removed from live storage, and may remain in backups for a short time. Records we must keep (billing records, moderation and legal-compliance records) are kept for as long as the law or a genuine need requires.

Your choices

You can view and edit your profile, change your password, remove files and photos, and delete your account from your settings. To ask for a copy of your data or for something we can’t do from the settings page, contact us, and we’ll respond as the law requires where you live.

Security

We use encryption in transit, hashed passwords, access controls and logging, but no system is perfectly secure. Use a strong, unique password.

Children

The Service is not for anyone under 18. If we learn an account belongs to a child, we will close it.

Changes

We’ll post updates here and tell you about material changes.