Privacy Policy
Filific keeps your files only until the link ends, keeps a small record of each upload for 90 days after that to deal with abuse, and uses no analytics cookies. It shows no ads.
What do we store when you upload files?
- The files, exactly as you uploaded them, until the link ends.
- File names, sizes and types, and the settings you chose: the expiry, the download limit and whether a password is set. If you set a password, we store only a one-way (bcrypt) hash of it.
- Your IP address and your browser's user agent, to limit abuse and to look into reports about a link.
- How many times each file was downloaded. We do not record who downloaded a file.
- A fingerprint of your private delete link (a SHA-256 hash), so we can check the link without storing it.
What do we store if you create an account?
Accounts are optional. If you create one, we store your email address, a one-way (bcrypt) hash of your password, when you signed up and last logged in, and which uploads belong to your account. We use your email only to identify your account, and we send no newsletters. Your account stays until you ask us to delete it: write to [email protected] from the account's email address. Uploads made while logged in are deleted on the same schedule as every other upload.
What do we store when you report a link?
The link, the reason and the description you give, your email address if you choose to enter one, and your IP address. We use them only to review the report and, if you left an email address, to reply to you.
How long do we keep it?
- Files are deleted when the link expires (at the time chosen when uploading), when you use your delete link or delete them from your account, or when we remove them for breaking the Terms of Use.
- When every file in a link has reached its download limit, the files are deleted 6 hours later, so that a download in progress can finish.
- An upload that stops before it is finished is deleted, with everything that arrived, once nothing has arrived for 6 hours.
- The record of an upload (file names, sizes, settings, IP address and user agent) is deleted 90 days after its link ended.
- Abuse reports are deleted 90 days after they were sent.
- Uploaded files are never copied into backups, so a deleted file is really gone.
Which cookies do we use?
filific_s_…is set only after you enter the right password for a link, so you do not have to type it again. It lasts 12 hours and works only for that link.filific_dkis a random key, set when you open a share page or click Download. Download links work only in the browser that holds it, so a copied download link cannot be used anywhere else. It lasts 7 days and says nothing about you.filific_userkeeps you logged in if you have an account. It lasts 30 days, or until you log out.filific_adminkeeps our own administrators signed in.
We use no advertising, analytics or tracking cookies, and Filific shows no ads.
Who else handles the data?
Filific runs on a virtual server that we rent from a hosting company, and its traffic passes through Cloudflare, which protects the site and provides the encrypted connection. Both process data such as IP addresses for us, to deliver the service. We do not sell your data or share it with anyone else, unless the law requires it, for example a valid order from law enforcement.
Do you keep server logs?
Like any website, our web server writes technical logs of requests (IP address, time, the address requested and the browser) to keep the service running and secure. These logs are kept only for a short time and then deleted.
What can you do?
- Delete your files at any time with your private delete link.
- Ask about, or ask us to delete, other data we hold about you by writing to [email protected]. For an upload made without an account, include its link: without it we usually cannot find the record.
Children
Filific is not meant for children under 13, and we do not knowingly collect data from them.
Changes to this policy
If we change what we collect or how long we keep it, we will update this page and the date below.
Last updated