Privacy Policy

Your files

Your files are never uploaded. Every tool on FileCrisp runs inside your browser using WebAssembly. Files are read from your device into your browser's memory, processed there, and handed back to you. They are not transmitted to us or to anyone else, we never receive them, and there is therefore nothing for us to store, inspect, retain or lose in a breach.

You can verify this yourself: open your browser's developer tools, switch to the Network tab, and process a file. Nothing is sent.

Who is responsible for this site

FileCrisp is an independent, one-person project rather than a company, and is the data controller for the limited information described here.

Any question about this policy, or any request to exercise a right under it, goes to navjotsumandev@gmail.com and is answered by a person, not a ticketing system.

What we do collect

Usage analytics, to know which tools people use and whether the site is working. This covers pages visited, approximate location derived from your IP address, device type, browser, and which tool actions occurred — a file was added, a job ran, a result was downloaded.

It does not include your files, their names, their contents or their exact sizes. File sizes are recorded only as a coarse band, so that a slow tool can be told apart from a large file. There are no accounts on this site, so none of it is attached to an identity you have given us.

We describe this as pseudonymous rather than anonymous, deliberately. Analytics providers assign a random identifier and process your IP address, and under GDPR that can still be personal data even though we could not name you from it.

Cookies and local storage

The site itself sets no cookies. The ones below come from the services named in the next section, and none of them is necessary for the tools to work — every tool runs with all of them refused.

• _ga and _ga_XXXXXXX — Google Analytics. Distinguishes one browser from another so a return visit is not counted twice. Expires about 13 months after your last visit.
• Google advertising cookies, once advertising is switched on — set by Google when ads are served, and used to limit how often you see the same ad and to measure whether an ad worked.
• Theme preference — not a cookie. Your light or dark choice is kept in your browser's local storage, is never sent anywhere, and clears with your browsing data.

Consent, and how to change your mind

In the European Economic Area, the United Kingdom and Switzerland, nothing that stores or reads a non-essential cookie runs until you allow it. Analytics and advertising storage are switched off by default and are only turned on if you agree through the consent prompt. Refusing is a button, not a maze, and the tools work identically either way.

Elsewhere, analytics runs on a legitimate-interest basis from your first visit, because local law permits it. You can still opt out through the links at the end of this policy or through your browser settings.

Where a consent prompt applies to you, a “Privacy choices” link appears in the site footer and reopens it, so any choice you have made can be changed later. Withdrawing is as easy as giving it was. If you see no such link, no prompt applies to you and nothing has been stored to withdraw.

Who else processes this data

A small number of services, all acting on our instructions, and none of which ever receives a file:

• Google Analytics — the usage measurement described above.
• Google AdSense — advertising, once it is switched on.
• Our hosting provider — serving the site, plus cookieless performance measurement that does not build a profile across sites.

• Google's privacy policy
• How Google uses information from sites that use its services

Advertising

FileCrisp carries advertising to cover its running costs. Ads never appear inside a tool's working area, and never above it — a tool you are using is not somewhere an advert belongs.

Third party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.

You may opt out of personalised advertising using the links below. Advertisers never receive your files, because your files never exist outside your browser — there is nothing for an ad network to be given.

• Opt out of personalised ads — Google Ads Settings
• Opt out across participating networks — aboutads.info
• Network Advertising Initiative opt-out

Where the data goes

These providers process data on servers outside the country you are in, including in the United States. Where that involves a transfer out of the EEA or the UK, those transfers rely on the European Commission's Standard Contractual Clauses and, for the United States, the EU–US Data Privacy Framework.

Analytics records are kept for 14 months and then deleted automatically. Email you send us is kept only as long as needed to deal with it.

Your rights

Under the GDPR, the UK GDPR and comparable laws, you have the following rights over personal data held about you. They are unusually easy to satisfy here, because there is so little: no account, no name, no email address unless you have written to us, and no file content, ever.

• Access — ask what is held about you.
• Rectification — have something inaccurate corrected.
• Erasure — have it deleted.
• Restriction and objection — including objecting to analytics based on legitimate interest.
• Portability — receive it in a machine-readable form.
• Withdraw consent — at any time, through the footer link, without affecting what was lawful before.

• Complain to an EU supervisory authority
• Complain to the UK Information Commissioner

If you are in California

We do not sell personal information for money, and never have. However, allowing personalised advertising counts as “sharing” for cross-context behavioural advertising under the CCPA as amended by the CPRA, and you have the right to opt out of it.

To do so, refuse advertising in the consent prompt from the footer link, or use the Google and aboutads.info opt-outs above. This site also honours the Global Privacy Control signal, so if your browser sends one, no opt-out request is needed. We do not discriminate against anyone for exercising a privacy right.

Children

FileCrisp is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided personal data, write to navjotsumandev@gmail.com and it will be deleted.

Changes to this policy

If this policy changes, the date above changes with it. If a change materially affects what is collected or who receives it, the consent prompt is shown again rather than the change being made quietly.