Privacy Policy
1. General Information
This Privacy Policy explains which personal data is processed when using this website.
This website allows users to upload files and create one-time or limited-use download links. Recipients can download the shared files using these links.
We process personal data only to the extent necessary to operate the website, provide the upload and download functionality, generate download links, ensure system security, and prevent misuse.
2. Controller
The controller responsible for data processing is:
gShare Demo
Max Mustermann
Musterstraße 12
12345 Musterstadt
Germany
Email: info@example.com
3. Hosting and Server Log Files
When this website is accessed, technical data is automatically processed by the web server. This may include:
- IP address
- date and time of access
- requested URL
- referrer URL
- browser type and version
- operating system
- amount of data transferred
- HTTP status code
This data is processed to provide the website technically, ensure system stability and security, and detect misuse.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the website.
Server log files are stored only for as long as necessary for security, troubleshooting, and evidence purposes, and are then deleted or anonymized.
4. File Uploads
Users may upload files to create download links. In this process, the following data may be processed:
- uploaded file
- file name
- file size
- file type
- time of upload
- optional message entered by the user
- technical access data such as IP address and browser information
- generated download links
- allowed number of downloads
- expiration date, if configured
This data is processed to provide the requested file upload, link generation, and later download by recipients.
The legal basis is Art. 6(1)(b) GDPR where processing is necessary to provide the requested functionality. In addition, Art. 6(1)(f) GDPR may apply where data is processed for system security, abuse prevention, and troubleshooting.
5. File Downloads
Recipients can download files using the provided link. During downloads, technical data may be processed, including:
- IP address
- date and time of download
- download link used
- download status
- browser and device information
This data is processed to technically provide the download, verify the allowed number of downloads, and prevent misuse.
6. One-Time Links and Limited-Use Links
This website can generate links that are valid only once or for a limited number of downloads.
Once the permitted number of downloads has been used or an expiration date has been reached, the associated file is automatically and permanently deleted. After deletion, the file cannot be restored.
Associated technical metadata is also deleted unless temporary storage is required for security, troubleshooting, or legal reasons.
7. Storage Period
Uploaded files are stored only for as long as necessary to provide the download link.
Files are deleted in particular when:
- all permitted downloads have been used
- a configured expiration date has been reached
- the link is manually deleted, if this feature is available
- misuse or security-related risks are detected
After these conditions are met, files are permanently deleted.
Technical log data may be stored for a limited period to ensure security, troubleshoot errors, and prevent misuse.
8. Contents of Uploaded Files
The contents of uploaded files are generally not manually reviewed.
Automated checks may be carried out where necessary to detect malware, misuse, unlawful content, or to ensure the technical operation of the service.
Users are responsible for ensuring that they are authorized to upload and share the files and that no third-party rights are violated.
9. Disclosure of Data
Personal data is disclosed only where necessary for the operation of the website or where required by law.
Data may be disclosed in particular to:
- hosting providers
- technical service providers
- security or maintenance providers
- public authorities, where legally required
Where required, data processing agreements pursuant to Art. 28 GDPR are concluded with service providers.
10. Cookies and Similar Technologies
This website uses only technically necessary cookies or similar storage technologies where required for the operation of the website.
These may include session cookies or technical storage mechanisms necessary for uploads, downloads, security, or login functionality.
Non-essential cookies, analytics tools, or marketing tracking are not used unless expressly stated otherwise.
Where cookies or similar technologies are not technically necessary, they are used only with prior consent.
11. Contact
If users contact us by email or via a contact form, the information provided is processed to respond to the request.
This may include:
- name
- email address
- content of the message
- time of the request
- technical metadata
The legal basis is Art. 6(1)(b) GDPR if the request relates to a contract or pre-contractual measures. In all other cases, processing is based on Art. 6(1)(f) GDPR.
12. Security
We take technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or deletion.
These measures may include:
- encrypted transmission via HTTPS
- access restrictions
- secure file storage
- randomly generated, hard-to-guess download links
- automatic deletion after use or expiration
- logging of security-relevant events
Despite all security measures, complete security during data transmission over the internet cannot be guaranteed. Humanity built the internet, and somehow we all agreed this was acceptable.
13. Rights of Data Subjects
Under the GDPR, data subjects have in particular the following rights:
- right of access
- right to rectification
- right to erasure
- right to restriction of processing
- right to data portability
- right to object to certain processing activities
- right to withdraw consent
- right to lodge a complaint with a supervisory authority
These rights can be exercised by contacting the controller using the contact details provided above.
14. Obligation to Provide Data
Certain technical data is required to use the website. Without this data, uploads, downloads, or link generation may not be available.
Providing uploaded files is voluntary. However, without uploading a file, no download link can be created.
15. Automated Decision-Making
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.
16. Changes to this Privacy Policy
This Privacy Policy may be updated if technical features, legal requirements, or processing activities change.
Last updated: 01.05.2026