Sub-processors

Last updated: 24 June 2026. This is general information, not legal advice.

To run Cloud Storage we rely on the providers below. We share only the data each provider needs for its role, and we do not sell personal data. Transfers outside the EU/EEA rely on Standard Contractual Clauses and the safeguards in Art. 44 to 49 GDPR.

Core infrastructure

• Telegram (Telegram FZ-LLC / Telegram Messenger Inc.). Role: encrypted storage backend for uploaded files. Data: your file contents (encrypted at rest by us before storage) and the message references that locate them. Location: global.
• MongoDB Atlas (MongoDB, Inc.). Role: application database. Data: account record (username, email, password hash), file and folder metadata, sessions, credits, and referral data. Location: managed cloud (United States / EU region).
• DigitalOcean (DigitalOcean LLC). Role: origin application server. Data: in-transit request handling and temporary upload buffers. Location: Singapore.
• Contabo (Contabo GmbH, Germany). Role: network exit used only for the optional torrent feature's peer traffic. Data: torrent peer connections, not account data. Location: France (EU).

Authentication and analytics

• Google / Firebase (Google LLC; Google Ireland Ltd). Role: sign-in verification (Firebase Authentication for Google, GitHub, and email-link) and, only with your consent, Google Analytics. Data: email address and a verification token at sign-in; aggregate, IP-anonymized usage for analytics. Location: United States (Art. 49 GDPR).
• GitHub (GitHub, Inc.). Role: optional sign-in provider. Data: the email and basic profile you authorize at sign-in. Location: United States.

Advertising (only with consent and on your action)

Loaded only if you enable the Advertising cookie category and choose to watch a rewarded ad. We pass a short-lived random token, never your identity or file contents.

• Monetag, Adsterra, AyeT-Studios, GPLinks, ShrinkEarn (as enabled). Role: rewarded advertising. Data: device and impression data they collect under their own policies. Location: varies.

Cloud imports (only when you connect them)

If you use the Cloud Drives feature, the provider you connect (for example Google Drive, OneDrive, Dropbox, Box, S3, and others) processes your request to list and import files you choose. These connections are initiated and authorized by you; see the provider-specific notes linked from our Privacy Policy.

Changes

We update this list when we add or remove a provider. Material changes are reflected in the "last updated" date above.