Privacy policy

1. What we collect

• Account data: your email address, a hash of your password (never the password itself), your account's storage limit and your invoice history.
• Your stored data: the objects you upload, encrypted at rest with a key unique to each object. Object names, sizes, content types and checksums are stored as plain metadata so the service can list and serve them.
• Access logs: for each request, the time, the IP address, the operation, the bucket and key, the response code and the bytes transferred. We keep these for 30 days for security, abuse handling and debugging, then delete them.
• Sign-in records: every attempt to sign in or sign up, successful or not, is recorded with the time, the IP address and your browser's user agent, for security and abuse prevention. We keep these for 90 days, then delete them.
• Usage totals: stored bytes and object counts per account, recorded daily and kept for billing for as long as the account exists plus the period the law requires for invoices.
• Support email: what you write to us, kept as long as needed to help you.

We do not use third-party analytics, advertising trackers or social widgets on this site. The sign-up form uses Cloudflare Turnstile to check that a person, not a script, is signing up; Cloudflare processes your IP address and browser details to do that. The console sets a session cookie so you stay signed in and a cookie that remembers this browser has signed in before, so that failed sign-in attempts by others do not lock you out, and stores resumable-upload state in your own browser.

2. Where data lives

Your objects are stored in Amsterdam, Netherlands. The gateway that encrypts and serves them runs in Helsinki, Finland, and holds your account data and object metadata. Encryption happens on the gateway before data is stored; the storage layer holds ciphertext only, with no file names and no link to your account. Encrypted backups of account data and metadata are kept with a separate hosting provider.

3. Who can see your data

Our staff do not read customer data. We access it only if you ask us to, if we are legally required to, or if we are investigating a credible abuse report, and then only the minimum needed. Share links and presigned URLs you create are your choice; anyone holding one can read the file it points to until it expires.

4. Sharing with others

We do not sell or rent your data or your account details. We share information only with providers we need to run the service (hosting, email delivery, payments) under contracts that limit what they may do with it, and with authorities when we are legally compelled to, in which case we tell you unless we are prohibited from doing so.

5. Your rights

• Access and export: everything you stored can be downloaded at any time with your own tools.
• Deletion: deleting an object removes its record and destroys its encryption key immediately, so its stored ciphertext can never be read again; the ciphertext itself may remain on the storage layer. Closing your account deletes all objects, keys and account data within 30 days, except invoice records we must keep by law.
• Correction: change your email or password from the console, or email us.
• If you are in a jurisdiction with data-protection rights (for example the EU or UK), you can exercise them by emailing us. We answer within 30 days.

6. Security

Every object is encrypted with its own AES-256-GCM key, wrapped by a master key held only by the gateway. Traffic to the endpoint and console is over TLS. Passwords are hashed with a slow, salted algorithm. Access keys can be scoped read-only and revoked at any time. If we discover a breach affecting your data, we notify you by email without undue delay.

7. Children

The service is not directed at children and we do not knowingly collect data from anyone under 18.

8. Changes and contact

We will announce material changes to this policy by email 30 days in advance. The data controller for your personal data is Enderchest. Questions or requests: [email protected].