PRIVACY POLICY

1. OUR CORE PRIVACY PHILOSOPHY

FileGuard was engineered under the principle of data minimization and structural privacy. We believe the safest data is the data never collected. We require zero user accounts, zero email addresses, zero passwords, and zero personal profiling to share or download files.

2. INFORMATION WE PROCESS

When you use FileGuard, only minimal technical metadata is processed temporarily:

• Uploaded File Bytes: Files and in-memory ZIP bundles are protected with end-to-end encryption in transit (TLS 1.3) and AES-256-GCM encryption at rest on Backblaze B2 S3 storage.
• SHA-256 Cryptographic Checksums: Calculated during streaming upload to serve as an authoritative integrity gate prior to recipient downloads.
• Sharing Tokens: 8-digit CSPRNG tokens generated via Python's secrets module. Plaintext tokens are returned exclusively to the uploader and never saved in the database; only irreversible 256-bit SHA-256 digests are stored at rest.
• Client IP Addresses: Sanitized and processed in memory solely to enforce the rolling 100 MB / 12-hour upload quota and block automated abuse. IP addresses are never shared with advertisers or third parties.

3. CLIENT-SIDE LOCALSTORAGE VAULT

Your transfer history (links uploaded or viewed) is stored locally in your browser's localStorage (fileguard_user_uploads and fileguard_user_views). This data lives solely on your device. FileGuard servers have no access to your history vault, and you can wipe your entire local record at any time with one click from the My History page.

4. AUTOMATIC PURGING & USER REVOCATION RIGHTS

Every uploaded file is governed by an authoritative 12-hour self-destruct countdown:

• At the 12-hour mark, our automated sweeper permanently erases the storage block from Backblaze B2 and deletes the relational record.
• Uploaders can execute Early Remote Revocation at any time before 12 hours from their history vault, which immediately executes an irreversible cloud purge and invalidates the share link for all recipients.

5. THIRD-PARTY DISCLOSURE

FileGuard does NOT sell, rent, monetize, or exchange user metadata or file contents with third-party advertisers, data brokers, or marketing networks. Infrastructure dependencies (Neon Serverless PostgreSQL and Backblaze B2 S3 storage) operate under strict enterprise confidentiality agreements.

6. SECURITY QUESTIONS & CONTACT

For security questions, vulnerability disclosures, or privacy questions, please review our source repository at GitHub.