Privacy Policy

Information we collect

Account information: the email and password you provide at registration. Passwords are stored as bcrypt hashes; we cannot read plaintext passwords.

Uploaded content: the HTML files you upload, used to serve your public links and stored on Cloudflare's global server network.

Technical information: IP addresses in access logs, used for daily upload rate limiting and abuse prevention.

Local storage: your login state and upload history are kept in your browser on your device only — clearing browser data will remove them.

How we use information

To provide the service (hosting, public access, management, upgrades), prevent abuse, troubleshoot, and improve.

We never sell your personal information. We share it with service providers only when necessary to operate (e.g., Cloudflare infrastructure, Waffo payment processing).

Payment information

Payments are processed by Waffo (an international payment provider). We never touch or store card details.

Storage & retention

Data is stored on Cloudflare's global server network; some data may reside outside mainland China. Free files are kept for 7 days, then cleaned up after a 7-day grace period. Pro files are kept while subscribed.

Accounts and payment records are retained as needed for business operations.

Your rights

You can delete your files anytime via the manage link or the file manager. Self-service account deletion is not available yet; to delete your account or ask privacy questions, email us at xsstomy@gmail.com.