Privacy
Policy

Last Updated: November 2025

1. Data Collection

We collect minimal data necessary to operate the service. This includes:
- Files you upload (stored encrypted).
- Metadata (filename, size, expiry settings).
- IP addresses (for rate limiting and security).

2. Encryption

Files are encrypted client-side using AES-GCM (256-bit) before being uploaded. The decryption key is contained in the URL fragment (`#key`) and is never sent to our servers. We cannot read your files.

3. Data Retention

Files are automatically deleted after the expiry period you select (1, 3, or 7 days) or when the download limit is reached. Once deleted, data is unrecoverable.

4. Third Parties

We use Convex for database and storage services, and Clerk for authentication. Please refer to their respective privacy policies for more information.

5. Contact

For privacy concerns, contact us at: support@owlghost.xyz