Last updated: 12 September 2026
Account email address; billing information processed by our payment provider (we never see card numbers); technical logs limited to IP address, timestamp and client version, retained for 30 days for abuse prevention.
Contents of your files (they are encrypted client-side); file names (encrypted as well); contacts; location history; browsing activity; advertising identifiers.
We process account data on the basis of contract performance (Art. 6(1)(b) GDPR) and technical logs on the basis of legitimate interest in service security (Art. 6(1)(f) GDPR).
We share nothing with third parties except: the payment provider (Stripe), hosting providers (Hetzner Online GmbH), and authorities when legally compelled by an EU court order. We do not participate in any data-sharing alliances.
Access, rectification, erasure, restriction, portability and objection — exercisable at any time by emailing [email protected]. We respond within 30 days as required by GDPR.
Encrypted backups are kept while the account is active and deleted irreversibly 60 days after account closure. Technical logs are rotated out after 30 days.
The website uses a single strictly necessary session cookie for the account area. No analytics, no marketing cookies.
Data controller: CloudSync OÜ, Sepapaja 6, Tallinn 15551, Estonia. See the contact page for all channels.