Privacy Policy

Effective date: [Effective date]

Last updated: October 16, 2026

This page is a draft. A few company details are still being filled in.

The short version: your files never leave your device, so we never see them. We keep only the small amount of information needed to run accounts, limits and payments, and you can delete it any time. Ads appear only on a separate ad page that you choose to open, and you decide there whether ads may be personalized. We never sell your account information.

1. Who we are

FilesAll is run by [Company] ("we"). Contact us about privacy at [support email]. Our person responsible for personal information is [Name].

2. What we never collect

Files you process, their names, their contents, or a history of what you processed. All processing happens in your browser, and our site's security settings block it from sending files anywhere. Read how that works.

3. What we collect

Information	When	Why	How long we keep it
Email address, and your name and Google account ID if you sign in with Google	You create an account	To run your account and send sign-in links	Until you delete your account, then 30 days (see section 8)
Plan and payment status (not card details)	You buy Pro	To give you Pro features	While you have an account, plus records the law requires us to keep
Daily file count	You use a tool while signed in	To apply daily limits	30 days
Scrambled (hashed) IP address with a key that changes daily, and a daily file count	You use a tool as a guest	To apply guest limits	24 hours
A random guest ID stored in your browser	You use a tool as a guest	To count guest files fairly when many people share one internet connection	Our copy: 24 hours. Your browser keeps it until you clear site data
A record that an ad finished, with the time	You watch an ad to unlock more files	To grant the extra files and stop abuse	24 hours
Basic technical logs (time, page, error codes, hashed IP)	Any visit	Security and fixing problems	7 days
Bot check signals	Sign-in, sign-up and tool use	To block bots (Cloudflare Turnstile)	Handled by Cloudflare, not stored by us
Anonymous page-view counts, without cookies	Any visit	To know which pages are used	Aggregated only

Email address, and your name and Google account ID if you sign in with Google

When: You create an account
Why: To run your account and send sign-in links
How long we keep it: Until you delete your account, then 30 days (see section 8)

Plan and payment status (not card details)

When: You buy Pro
Why: To give you Pro features
How long we keep it: While you have an account, plus records the law requires us to keep

Daily file count

When: You use a tool while signed in
Why: To apply daily limits
How long we keep it: 30 days

Scrambled (hashed) IP address with a key that changes daily, and a daily file count

When: You use a tool as a guest
Why: To apply guest limits
How long we keep it: 24 hours

A random guest ID stored in your browser

When: You use a tool as a guest
Why: To count guest files fairly when many people share one internet connection
How long we keep it: Our copy: 24 hours. Your browser keeps it until you clear site data

A record that an ad finished, with the time

When: You watch an ad to unlock more files
Why: To grant the extra files and stop abuse
How long we keep it: 24 hours

Basic technical logs (time, page, error codes, hashed IP)

When: Any visit
Why: Security and fixing problems
How long we keep it: 7 days

Bot check signals

When: Sign-in, sign-up and tool use
Why: To block bots (Cloudflare Turnstile)
How long we keep it: Handled by Cloudflare, not stored by us

Anonymous page-view counts, without cookies

When: Any visit
Why: To know which pages are used
How long we keep it: Aggregated only

4. Cookies and browser storage

Our tool pages use one essential cookie to keep you signed in and no advertising or tracking cookies, so they show no cookie banner. A sign-in lasts 30 days from your last visit, unless you sign out. Your browser's own storage keeps your language, settings, guest ID and, if you choose, your saved signature; apart from the guest ID, these stay on your device and are never sent to us. Our separate ad page does use cookies and similar technology from our ad partners. Our Cookie Policy lists every cookie and how to control them.

5. Ads

If you reach your daily limit, you can choose to watch a short video ad to unlock more files. The ad plays on a separate page (watch.filesall.com) that opens in a new tab. That page never receives your files and cannot read the tool page.

On the ad page, our ad partner (Google Ad Manager, or AppLixir) may collect your IP address, device and browser details, and cookie or advertising identifiers to show and measure ads and prevent fraud. Whether those ads are personalized depends on where you live and what you choose:

Canada, the EU, the UK and Switzerland: ads are personalized only if you agree in the consent window. Saying no still unlocks your files.
US states with privacy laws: ads may be personalized unless you opt out with the Your privacy choices link or your browser sends a Global Privacy Control signal, which we honor automatically.
Anyone under 16, or anyone who prefers it: you can always choose non-personalized ads.

The ad page tells us only that an ad finished, so we can grant the extra files. We do not receive anything else the ad partner collects. Google's use of this information is described at policies.google.com/technologies/partner-sites.

6. Who we share information with

We never sell your account information. Apart from the ad partners on the ad page described in section 5, we use these service providers only to run the Service:

Cloudflare: hosting, security and bot checks
Supabase: accounts database
Resend: sign-in emails
Google: sign-in, if you choose it
Lemon Squeezy: payments, sales tax and invoices, as seller of record (it handles your card details under its own privacy policy)
Google Ad Manager and AppLixir: ads on the ad page only, under their own privacy policies
Google's certified consent management platform: records your ad choices on the ad page

We may disclose information if the law requires it, and it would pass to a buyer if the business were sold, under this same policy.

7. Where information is stored

Our providers store information in the United States and possibly other countries. We choose providers that protect it with industry-standard security.

8. Your rights

You can see, correct, download or delete your information at any time from your account settings or by emailing [support email]. We answer within 30 days. Depending on where you live, laws such as California's CCPA, Canada's PIPEDA, Quebec's Law 25 and the EU's GDPR give you these rights and others, including the right to opt out of personalized ads (the Your privacy choices link in our site footer, or a Global Privacy Control signal from your browser) and the right to complain to a privacy regulator. We will not treat you differently for using them. When you choose "Delete my account", you are signed out at once and the account is deleted for good 30 days later. Signing in again before then keeps the account.

9. Children

The Service is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.

10. Security

We store as little as possible, encrypt information in transit, restrict access to our systems, and use two-factor sign-in for every administrator account. If a breach affects your information, we will notify you and the authorities as the law requires.

11. Changes

We will post any update here with a new effective date and email account holders about significant changes before they apply.

12. Contact

[Company], [support email]