Privacy · folder.host

1. What we store

Email, password hash, language, second-factor settings (the secret is stored encrypted).
Public keys of devices and the binding of devices to your account.
Connection requests: email, country, internet provider, device model, capacity and uplink, comment.
Support requests and abuse reports.
Payment data: only payment provider identifiers. We hold no card details.
Technical logs: IP address and browser on sign-in and on staff actions in the management panel.

2. What we do not store or see

Files, their names, sizes and content.
Encryption keys, the recovery password and private keys of devices.
The network's service keys: they are not on the site.

3. Device reports

Every 5 minutes a device reports: version, used and offered space, free disk space and its state, time online, integrity check results, connection speed. There are no file names, paths or file sizes in reports, and the site rejects any extra fields. Reports are kept for 90 days.

4. Why we need this data

To run your account, send emails about the state of your devices, account for your contribution, stop abuse and provide support. The basis for processing is performing the terms of service and our legitimate interest in keeping the service secure.

5. Retention, rights, transfers

Account data is kept while the account is open; after it is closed we delete the data, except what the law requires us to keep. You can ask for a copy of your data, correct or delete it, or object to processing: write to support (support@folder.host) or use Support in your account.

To run the service we use hosting and email providers. They process data only on our instructions. Data may be processed outside your country; we require providers to protect it no less than described here.

6. Contacts