Privacy Policy

Last updated: 2026-09-25

1. Who we are

Filarr is published by Mathis Belouar-Pruvot, an individual based in Sainte-Geneviève-des-Bois, France.

• Data controller: Mathis Belouar-Pruvot
• Email: contact@filarr.com

2. Data collected

2.1 Account data

When you create a Filarr cloud account, we collect:

• Email — required for cloud sync. Legal basis: contract performance (GDPR Art. 6.1.b).
• Hashed password — stored as a bcrypt hash. Your plaintext password is never stored or transmitted.
• Account creation date

2.2 Device data

For multi-device management, we store:

• Device name — from os.hostname()
• Operating system — e.g. "Windows 10.0.26200"
• Last connection date

2.3 Payment data

Payments are handled exclusively by Stripe, Inc. (PCI DSS Level 1 certified). Filarr never stores your banking details (card number, CVV, expiration date).

We only store the Stripe Customer ID (an opaque identifier) to link your Filarr account to your Stripe subscription.

2.4 File data (zero-knowledge encryption)

2.5 Analytics and anti-abuse

Analytics: we use Plausible, self-hosted on our own infrastructure — no data is sent to a third-party service — without cookies and without retaining IP addresses. Share recipient and deposit pages (/s, /r) are never measured. We also collect Web Vitals (performance) via Vercel, with no tracking cookie. Legal basis: legitimate interest (GDPR Art. 6.1.f).

Anti-abuse (Filarr Send / File Request): to limit abuse of the anonymous features, the server retains the IP address only as a hash (SHA-256) and a coarse location reduced to country and /16 subnet — never the full IP address. This data has short retention and is deleted automatically. Legal basis: legitimate interest (GDPR Art. 6.1.f).

Reports of illegal content and retention of identification data: when a link is the subject of a serious report — in particular a report of child sexual abuse material — we open a case targeted at the sender of the content concerned. From that point on, and for that person alone, subsequent connections to our servers record the full IP address, user agent, network operator and country. Collection is limited to 90 days from the opening of the case and to a bounded number of records; the data is kept for 12 months and then deleted automatically, unless a legal request or proceeding is ongoing. It is used only to answer a judicial authority or to refer a case to the competent authorities (Pharos in France); it is never used for commercial or profiling purposes. The content itself remains end-to-end encrypted and unreadable to us. Legal basis: legal obligation (GDPR Art. 6.1.c), Article 6 of the French LCEN and decree no. 2021-1362, Article 18 of Regulation (EU) 2022/2065 (DSA).

2.6 Desktop app: what leaves the device

Besides sync, when you turn it on, the desktop app connects for three reasons:

• Update check — about a minute after launch, then every four hours, it asks releases.filarr.com whether a new version exists. Nothing else is sent.
• Version message — at most once a day per profile, it sends a Filarr server its version, the type of system (Windows, Linux) and a randomly drawn code, not linked to your account, your email address or your files. We use it to count installations and the versions in use.
• Error reports — when an error is not handled by the app, a report goes to Sentry (EU ingestion). This is on by default. The report contains the error message, its technical trace, the version, the type of system, the code above and the last actions taken in the app. It never contains the content of your files or notes, but an error message or an action can mention a file or note name, or a path on your computer. We ask Sentry not to keep your IP address.

Legal basis: legitimate interest (GDPR Art. 6.1.f) — keeping the app up to date and fixing its errors. The web app sends neither version messages nor error reports. The full, current list, with what can be turned off: what leaves your device.

3. What Filarr does NOT collect

• Content of your files and notes
• Names of your files — except when a desktop app error report mentions one (§2.6)
• Structure of your folders — except a path mentioned in such a report (§2.6)
• Encryption keys in cleartext or in any usable form (the stored copy is encrypted by your password)
• Tracking or advertising cookies
• Your IP address in clear — only a hash + country/16 for anti-abuse. One exception: following a serious report concerning you, under the conditions and limits described in §2.

4. Where data is stored

• Database: Cloudflare D1 (Cloudflare’s “Western Europe” region (location hint, no binding jurisdiction))
• Encrypted files: Cloudflare R2 (Cloudflare’s “Western Europe” region (location hint, no binding jurisdiction))
• Payments: Stripe, Inc. (PCI DSS Level 1 certified)
• Website: Vercel Inc.
• Transactional emails (account, team, billing): Resend (United States)
• Contact-form email & domain name: OVH SAS (France)
• Desktop app error reports (§2.6): Sentry (EU ingestion)

Transfers to the United States (Cloudflare, Vercel, Stripe, Resend) are governed by the European Commission’s Standard Contractual Clauses; OVH is in France. The full, up-to-date list of our sub-processors is published on our Sub-processors page.

5. Data retention

• Account data: retained until the user deletes their account.
• Encrypted files: retained until deleted by the user or plan termination.
• Payment data: managed by Stripe per their policy (typically 7 years for tax obligations).
• Contact messages: retained for a maximum of 12 months.
• Identification data after a report: retained for 12 months from the date recorded, then deleted automatically — unless a judicial request or proceeding is ongoing, in which case retention is frozen for the duration of the proceeding (see §2).

6. Your rights (GDPR)

Under the GDPR, you have the following rights:

• Access — view your data from the app (Settings > Account) or via GET /account.
• Rectification — update your email from the app or via PUT /account.
• Erasure — delete your account from the app (Settings > Delete my account). This immediately deletes your account, all devices, and all encrypted files on R2. This operation is irreversible.
• Portability — export your data from the app (vault export as ZIP).
• Objection — contact@filarr.com

Response time: 30 days maximum. If you believe your rights are not being respected, you can file a complaint with the CNIL (cnil.fr).

7. Cookies

The filarr.com website does not use tracking or advertising cookies (no Google Analytics, no Facebook Pixel). Our analytics (self-hosted Plausible) and Web Vitals (Vercel) run without cookies — see §2.5. Only a language preference cookie (fr/en) may be used. No consent banner is required for these.

8. DPO Contact

For any questions regarding your personal data:

• Email: contact@filarr.com
• Data controller: Mathis Belouar-Pruvot

9. Changes

In case of substantial changes to this policy, we will notify users with a cloud account by email. The last updated date at the top of this page will be updated accordingly.

See also: Terms of Service · Legal Notice