Privacy policy

This is the starting template that ships with this software, not legal advice. Whoever runs this service should replace it with terms that describe their own business, and have a lawyer read it if anything here matters to them.

Who holds your data

Driply runs on a server operated by whoever gave you this address — "the operator" below. Your account and your files live on that server and in the object storage it is configured with. There is no other company in the middle holding your files.

What is collected

• Your account. The email address and name you signed up with, and a profile picture if you set one.
• Your files, and facts about them. What you upload, plus names, sizes, types, and the times things were created or changed.
• Sign-in sessions. Each device signed in to your account, with its browser or app, its IP address and when it was last used — which is what lets you see them on your account page and sign out a device you no longer have.
• An activity record. Significant actions such as signing in, uploading, deleting and creating share links, with the IP address they came from. It is kept for security and support: it is what answers "who deleted that folder".

Cookies

One cookie keeps you signed in. A second, short-lived one remembers that you entered the password for a protected share link so you are not asked twice. That is all of them: there are no advertising cookies and no third-party analytics.

Where your files are stored

Files are held in S3-compatible object storage the operator configured — their bucket, with their provider. Uploads go straight from your browser to that storage and downloads come straight back from it, so file contents do not travel through this server. The links that reach the storage are signed and expire after a short time; nothing is left publicly readable.

Email

This installation is not configured to send email, so no messages are sent to your address.

Who can see your files

You can. So can anybody you give a share link to, subject to whatever password and expiry you set on it. So can the operator, who administers the server and the storage behind it — as is true of any service you do not run yourself. Nobody else is given access.

How long things are kept

A deleted file sits in the trash for 30 days and is then removed permanently. When you close your account, the account and its files are deleted. The activity record is kept for as long as the account exists, because an audit trail with holes in it is not an audit trail.

What you can do

You can download any file at any time, delete files, and close your account. For anything else — a copy of what is held about you, or a correction — ask the operator.

Changes to this policy

The operator may revise this page. The date at the top is when they last did.

Contact

Questions about any of this go to the operator.