Data Privacy

1. Introduction

This privacy policy explains how we collect, use, and protect your personal data when you use OneTimeFile. We are committed to ensuring that your privacy is protected in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

2. Data Controller

The data controller responsible for this website is:

3. Data We Collect

When you use our service, we may collect the following information:

• File metadata: filename, size, and content type of uploaded files
• Anonymous session ID: a randomly generated identifier stored in a cookie to manage your uploads
• Technical data: IP address (temporarily for rate limiting), browser type, and access times

4. Purpose of Processing

We process your data solely for the following purposes:

• To provide the file sharing service
• To manage and display your recent uploads
• To enforce usage limits and prevent abuse
• To comply with legal obligations

5. Data Retention

Uploaded files and their associated metadata are automatically deleted 24 hours after upload. Anonymous session cookies expire after 30 days. Server logs are retained for a maximum of 7 days.

6. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Request correction or deletion of your data
• Object to processing
• Request data portability
• Lodge a complaint with a supervisory authority

Since we only store anonymous session IDs and file metadata (not content), most personal data requests can be fulfilled by clearing your browser cookies.

7. Integration of Third-Party Services

To operate and improve our service, we integrate the following third-party providers. Each provider processes data in accordance with their own privacy policies and as our processor under GDPR Article 28 where applicable.

7.1 Google Ads

We use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. When you click on a Google ad and reach our website, Google may place a conversion cookie on your device. This cookie does not contain personally identifiable information and expires after 30 days. The data collected is used solely to generate aggregate conversion statistics. Google processes this data in accordance with the Google Privacy Policy. You can opt out of personalised advertising at Google Ads Settings or via the Digital Advertising Alliance opt-out page.

7.2 Google Cloud

Our application is hosted on Google Cloud Run (Infrastructure as a Service). Google Cloud processes server logs, IP addresses, and request metadata for the purpose of hosting, securing, and maintaining our service. This processing is governed by Google's Data Processing Terms (DPT), which incorporate EU Standard Contractual Clauses for international data transfers. For more information, see the Google Cloud Data Processing Terms.

7.3 Cloudflare

We use Cloudflare as a CDN and security provider. Cloudflare processes all traffic to and from our website, which includes IP addresses, browser metadata, and request headers. This is necessary to provide DDoS protection, optimise content delivery, and enforce security rules (including Cloudflare Access on our staging environment). Cloudflare acts as a processor under our Data Processing Agreement, which includes EU Standard Contractual Clauses. For details, see the Cloudflare Privacy Policy and Cloudflare Data Processing Agreement.

8. Cookies

We use a single anonymous session cookie to track your uploads. This cookie contains no personally identifiable information. No third-party tracking cookies are used.

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page.

10. Contact

If you have any questions about this privacy policy or your data, please contact us at [email protected].