Privacy

When you create an account we store your email, password hash, username, and settings needed to run the product. OAuth (Discord) links store the Discord id and username you authorize.

Anything you publish on a bio — text, media, links, music — is public by design. Views and basic analytics may be counted for your dashboard.

Files you upload from the site or ShareX are stored with your account. You can list and delete them from Settings. Public URLs use a random id and do not include your username, email, or user id.

If you enable Anonymous Upload, public pages and URLs do not show your account. Those files are kept out of your normal file list. The mode is off by default and uses a separate revocable token.

For security and abuse prevention we store file metadata (size, type, checksum), an internal owner reference, hashed IP, token id, timestamps, and usage counters. Upload tokens are stored hashed. Raw tokens are not written to application logs.

Authenticated files stay until you or staff delete them. Anonymous files may expire if you chose an expiration. Deleting a file removes public access. Staff can delete files and revoke tokens to handle abuse.

Hosting malware, phishing, CSAM, or other illegal content is forbidden. We may rate-limit, revoke tokens, delete files, or disable anonymous upload globally.