How we handle your data
When you create an account on fstorage, we collect the personal information you provide directly, including your email address and display name. This information is necessary to establish your identity on the platform and to communicate with you about your account.
We automatically collect certain usage data when you interact with the service, such as the files you upload, their metadata (filename, size, expiration time), and the frequency and duration of your sessions. This data helps us understand how the platform is used and identify areas for improvement.
We also collect technical data including your IP address, browser type and version, operating system, device identifiers, and referral URLs. This information is used for security monitoring, diagnostics, and analytics purposes.
Providing the service. Your data is used to operate, maintain, and deliver the file storage and sharing features you expect from fstorage. This includes processing uploads, generating share links, enforcing expiration policies, and managing access controls.
Improving the product. Aggregate usage patterns help us optimize performance, design new features, and refine the user experience. We do not use your personal files or content for product improvement without your explicit consent.
Security. We analyze access logs and upload activity to detect and prevent abuse, unauthorized access, and other malicious behavior. Automated systems flag anomalous patterns for human review.
Legal compliance. We may process your data to comply with applicable legal obligations, respond to lawful requests from authorities, or enforce our Terms of Service.
Files you upload are automatically deleted according to the expiration time you select at the time of upload. Once a file expires, it is permanently removed from our storage systems within 24 hours. Files that are explicitly deleted by users are purged immediately.
Account data — including your email address, display name, and account preferences — is retained for as long as your account remains active. If you delete your account, all associated data is permanently erased within 30 days, except where we are required to retain certain information for legal or regulatory purposes.
fstorage employs industry-standard security measures to protect your data. All files are encrypted at rest using AES-256 and transmitted over TLS 1.3 (HTTPS). Access to production systems is restricted to authorized personnel and requires multi-factor authentication.
We conduct regular third-party security audits and penetration tests to verify the effectiveness of our controls. fstorage is SOC 2 Type II compliant, and we maintain a dedicated security team that monitors our infrastructure 24/7.
We rely on trusted third-party cloud infrastructure providers for data storage and content delivery. These providers are bound by data processing agreements that prohibit them from using your data for any purpose other than providing the contracted services.
Our content delivery network (CDN) partners may cache certain assets regionally to improve load times. These partners are contractually obligated to maintain confidentiality and security standards consistent with our own policies.
We do not sell your personal information to third parties or use it for advertising purposes.
Depending on your jurisdiction, you may have the right to access, correct, or delete the personal data we hold about you. You may also request a portable copy of your data in a machine-readable format.
To exercise any of these rights, please contact us at the email address below. We will respond to your request within 30 days. We may ask you to verify your identity before processing certain requests.
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please reach out to our Data Protection team at privacy@fstorage.duckdns.org. We take all privacy-related inquiries seriously and will respond promptly.