Privacy Policy

1. General Information

This privacy policy explains which personal data is processed when using this website. The website allows users to upload files and create download links from them that can be used once or multiple times. Recipients can download the provided files via these links.

Protecting personal data is important to us. Personal data is only processed to the extent necessary to operate the website, provide the upload and download functionality, and ensure the security of the service.

2. Controller

The controller responsible for data processing is the operator of this website. Full contact details are provided in the legal notice (Imprint).

3. Hosting and Server Log Files

When this website is accessed, the web server automatically processes technical data. This may include:

• IP address
• Date and time of access
• URL accessed
• Referrer URL
• Browser type and version
• Operating system
• Amount of data transferred
• HTTP status code

This data is processed to technically provide the website, ensure the stability and security of the system, and detect misuse.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the website.

Server log files are stored only as long as necessary for security and evidentiary purposes, and are then deleted or anonymized.

4. File Uploads

Users can upload files to the website to create download links from them.

As part of providing the upload and download service, technical metadata is processed (e.g. file name, file size, file type, timestamps and link status).

The following technical and organizational metadata is processed in particular:

• File name
• File size
• File type
• Time of upload
• Optionally entered message
• Technical access data such as IP address and browser data
• Generated download links
• Number of permitted downloads
• Expiration date, if set

This processing is carried out to enable the requested file upload, link creation, and subsequent download by recipients.

The legal basis is Art. 6(1)(b) GDPR, insofar as processing is necessary to provide the requested function. Art. 6(1)(f) GDPR may additionally apply where data is processed for system security, misuse prevention, and error analysis.

5. File Downloads

Recipients can download files via the provided link. During the download, technical data is processed, in particular:

• IP address
• Date and time of the download
• Download link used
• Status of the download
• Browser and device information

This data is processed to technically provide the download, verify the permitted number of downloads, and prevent misuse.

6. One-Time Links / Limited Download Links

The website can generate links that are valid only once or for a defined number of downloads.

Once the permitted number of downloads has been used or a set expiration date has been reached, the associated file is automatically and irrevocably deleted. After deletion, the file cannot be restored.

Associated technical metadata is also deleted, unless it must be temporarily retained for security reasons, error analysis, or legal obligations.

7. Retention Period

Uploaded files are stored only as long as necessary for the purpose of providing the link.

Deletion occurs in particular:

• when all permitted downloads have been used
• when a set expiration date has been reached
• when the link is manually deleted, if this function is offered
• when the service detects misuse or security-relevant risks

Files are irrevocably deleted once these conditions have been met.

Technical log data may be stored for a limited period to enable security, error analysis, and misuse prevention.

8. Contents of Uploaded Files

The contents of uploaded files are generally not manually reviewed. An automated check may be carried out where necessary to detect malware, misuse, or unlawful content, or to ensure technical operation.

Users are themselves responsible for ensuring that they are authorized to share the uploaded files and that the upload does not infringe the rights of third parties.

9. Disclosure of Data

Personal data is only disclosed to the extent necessary for the operation of the website or where a legal obligation exists.

Disclosure may in particular be made to:

• Hosting providers
• Technical service providers
• Security or maintenance service providers
• Authorities, where a legal obligation exists

Data processing agreements pursuant to Art. 28 GDPR are concluded with service providers where required.

10. Cookies and Similar Technologies

This website only uses technically necessary cookies or comparable storage technologies, insofar as these are required for the operation of the website.

This may in particular include session cookies or technical storage mechanisms required for uploads, downloads, security, or login functions.

Non-essential cookies, analytics tools, or marketing tracking are not used, unless explicitly stated otherwise.

Insofar as cookies or similar technologies are not technically required, they are only used following prior consent.

11. Contact

If users get in touch by email or via a contact form, the submitted information is processed in order to respond to the inquiry.

This may include:

• Name
• Email address
• Content of the message
• Time of the inquiry
• Technical metadata

The legal basis is Art. 6(1)(b) GDPR, where the inquiry relates to a contract or pre-contractual measures. In all other cases, processing is based on Art. 6(1)(f) GDPR.

12. Security

We take technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or deletion.

This may include:

• Encrypted transmission via HTTPS
• Access restrictions
• Secure file storage
• Randomly generated, hard-to-guess download links
• Automatic deletion after use or expiration
• Logging of security-relevant events

Despite all security measures, complete security of data transmission over the internet cannot be guaranteed, since the internet was, after all, built by humans, and we all live with the consequences.

13. Rights of Data Subjects

Under the GDPR, data subjects have, in particular, the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to certain types of processing
• Right to withdraw consent already given
• Right to lodge a complaint with a data protection supervisory authority

The contact address given above may be used to exercise these rights.

14. Obligation to Provide Data

The provision of certain technical data is necessary to use the website. Without this data, uploads, downloads, or link creation may not be possible.

Providing uploaded files is voluntary. However, no download link can be created without an upload.

15. Automated Decision-Making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

16. Changes to This Privacy Policy

This privacy policy may be updated if technical functions, legal requirements, or processing procedures change.

Last updated: May 1, 2026