What we collect
If you sign in with Google, we store your Google "sub" identifier, email address, display name, and avatar URL. That's the entire user record. We don't read your Google contacts, calendar, drive, or anything else.
Anonymous uploads aren't tied to any account at all.
Where your files live
Media bytes are stored on Cloudflare R2 (S3-compatible object storage). Cloudflare's infrastructure is the only system that ever sees the actual file contents. We don't analyse your files, don't index them for ads, don't sell anything.
What we don't do
- No advertising. No tracking pixels. No third-party analytics.
- No selling your data to anyone, ever.
- No reading the contents of private uploads. Cloudflare R2 stores them encrypted at rest.
- No emailing you marketing. Auth flows only.
What other people can see
Three visibility levels per upload:
- Public - listed on the Explore feed and your profile. Anyone with the link can see it.
- Private - only people with the direct link can see it. Hidden from listings.
- Anonymous - not attached to any account. Only the link works; no public attribution.
You control the privacy of every individual upload from the upload zone or the wall.
Account deletion
Email wentzel.dev@gmail.com from your registered email. We'll wipe your account, all uploads, and all metadata within 24 hours. No retention period, no exit fees.
Cookies
We use one session cookie (HTTP-only, SameSite=Lax) for keeping you signed in. No tracking cookies. No cross-site cookies.
Hosting + processing locations
Cloudflare R2 storage is in Europe (Frankfurt). Cloudflare D1 (the metadata database) is in Western Europe. Cloudflare Workers serve every request from the nearest edge location to you, including Johannesburg for South African users. The application code runs on Cloudflare's infrastructure exclusively.
Changes
If this policy ever materially changes, you'll see a banner on the home page for at least 14 days before the changes take effect.