Last updated: 24 June 2026. This is general information, not legal advice.
This policy explains how Cloud Storage processes personal data and your rights under the EU/UK General Data Protection Regulation (GDPR) and similar laws. For visitors in California and other US states, see "Your rights" below.
The data controller is the operator of this service. Use the contact options on the site to reach us about your personal data.
Our provider details are also published in the Impressum.
Uploaded files are encrypted by us with AES-256 and stored as encrypted blobs on Telegram's infrastructure; account data and metadata are held in our managed database. This is server-side encryption, not end-to-end: our servers hold the key material needed to deliver your files back to you, so the service can technically access file contents to operate (for example streaming). We do not access your content except as needed to run the service or to comply with law. Full detail is on the Security page.
Strictly necessary cookies run the service. Analytics (Google Analytics) and advertising load only with your consent. Manage choices anytime via cookie settings. Details: Cookie Policy.
We share data only with providers that help us run the service, and never sell it. The full list, roles, and locations are on the Sub-processors page.
Some providers (for example Google) process data in the United States. Such transfers rely on Standard Contractual Clauses and the safeguards in Art. 44 to 49 GDPR. Where US processors are involved through optional analytics or advertising, this is disclosed in the consent banner.
Subject to applicable law you have the right to access, rectify, erase, restrict, and port your data, to object to processing based on legitimate interests, and to withdraw consent at any time. You can export your data and delete your account directly from your account settings, and you can withdraw cookie consent via cookie settings. To make any other request, contact us through the Impressum; we respond within one month. You also have the right to lodge a complaint with your data protection supervisory authority.
US state privacy rights (for example California): we do not sell personal information or share it for cross-context behavioral advertising. You may request access or deletion using the same tools and contact above, and we will not discriminate against you for exercising these rights.
We do not use automated decision-making that produces legal or similarly significant effects about you.
The service is not directed to children. If you are under 16, please obtain consent from a parent or guardian before using consent-based features (Art. 8 GDPR).
Cloud Storage can connect to third-party cloud providers via OAuth so you can import your own files. Each integration has its own notes:
Cloud Storage uses a credit system to gate specific actions; storage remains unlimited regardless of balance. You can earn credits by viewing third-party advertisements (only if you enable advertising cookies), claiming a daily bonus, or referring new users. When you choose to view an ad, your browser loads code from the enabled network (for example Monetag, Adsterra, GPLinks, ShrinkEarn, or AyeT-Studios), which may set cookies and read device identifiers under its own policy. We do not share your username, email, IP address, or file contents with these networks; we pass only a short-lived random token so your reward can be credited. If you sign up through a referral link, we record the referring account's username so we can credit the referrer once.
To support our obligations under 17 U.S.C. section 512, we retain DMCA takedown notices and counter-notifications submitted through the DMCA page, including the submitter's name, email, postal address and telephone number (for counter-notifications), IP address, user-agent, and timestamp. These records may be forwarded to affected users when a counter-notification is filed, and may be produced in response to valid legal process.
We will update this policy as the service evolves and reflect material changes in the "last updated" date. Significant changes to consent-based processing will re-prompt the cookie banner.