Privacy Policy
Plain talk on what we keep.
FileShoot is built to do one thing — accept a file, hand back a link, deliver
that file to people who follow the link. Everything below is the full story of
what we store, who can see it, and how long it stays.
What we store
- The file you upload. Stored as-is on a single server. We don't open it, scan it, run it through machine learning, or share it with anyone. It stays only until your recipient downloads it once — at which point it is removed from the server within seconds — or for 30 days from upload if no download ever happens, whichever comes first.
- The file's metadata. Original filename, content type, byte size, upload timestamp, the IP address it was uploaded from, and whether the file has been downloaded. Removed at the same time as the file itself.
- An access log. Every HTTP request to the service is logged, with a timestamp, the IP that made it, the path requested, the response status, and the User-Agent header reported by the browser. We use this to spot abuse and debug problems — nothing else.
What we don't store
- No cookies. The site sets none — there is no session, no login.
- No third-party analytics, ads, pixels, or trackers of any kind.
- No identity information beyond what the network protocol itself reveals (your IP, your browser's User-Agent).
Who can see your file
The download link is long, random, and impossible to guess. Only the first
person you share the link with can complete a download — and even then, only
if their network is on our pre-approved allow list. The operator of the service
has filesystem access to your file like any system administrator does, and the
content is never opened or shared with anyone else.
How long things stay
- Files: removed within seconds of the first successful download, or 30 days after upload if no download happens — whichever comes first. There is no way to extend either trigger.
- Metadata: removed together with the file.
- Access log: kept on the server's disk in plain-text form, available to the operator only. We need this to detect abuse and to respond to legal requests; it does not contain file contents, only the request envelopes.
Deleting your file early
If you want a file gone before either auto-delete trigger fires, write to
support@fileshoot.com with the share link
(or just the ID part of it) and we'll remove it as soon as we see the message.
Hosting and jurisdiction
FileShoot runs on a single virtual server hosted with DigitalOcean in the
United States. Data lives on that server's disk only — there is no CDN, no
replication, no backup outside of the host's own snapshot system. The service
is operated under United States law.
Contact
Anything about your data — questions, deletion requests, complaints — goes to
support@fileshoot.com. Plain English is fine.