What we don't collect, first

What we never do

• No tracking. No advertising cookies, nothing that follows what you do
• We never store your IP address as it is
• Nobody reads the files you upload
• We don't sell your data or use it for advertising

What one shared link stores

• The file itself
• The sender name, if you set one (it shows on the reader's screen)
• The password, if you set one — stored one-way, never as you typed it
• File name, size and type, plus the creation time and deadline
• Any flag the entry check attached

How we handle IP addresses

To stop one person from creating thousands of links, and to stop reports from being abused, we have to count. So we run the connecting IP address through a one-way function and keep only 24 characters of the result, then count those. The address itself is never stored or logged.

Each purpose gets its own separate value, so comparing the upload counter against the report counter cannot tell you it was the same person. The counters are deleted after two days.

Cookies

There are four, and none of them are for advertising or tracking. All of them are sent only to quietly.page, never to the domain that serves file contents (usercontent.quietly.page).

• Keeping you signed in (only if you made an account, 30 days)
• Remembering that you unlocked a password-protected share (only for that link, cleared when you close the browser)
• Your display language (one year)
• Your light or dark preference (one year)

What we count

To see whether the service is being used, we count only what kind of thing happened, and when — an upload happened, a report came in. Never who, never which file. Those records are deleted after 90 days.

Page views go through Cloudflare Web Analytics, which uses no cookies and builds no identifier for you. It runs only on Quietly's own screens — not one byte of it reaches the screen where someone reads your file.

What a report leaves behind

Which share, the reason, the time, and a hash of the reporter. Deleted after 30 days. We keep no copy of the content.

If you make an account

The only email we send is a password reset link. No newsletters, and we don't measure whether you opened it.

There is no button yet for deleting an account. Write to the address on the operator page if you need one deleted.

• Your email address, used only for signing in and resetting your password
• Your password, stored one-way
• Your display name, if you set one — it becomes the default sender name
• The list of links you created, and how much space they use

Where it lives, and who else sees it

Your data sits on Cloudflare's infrastructure, which may store it on servers outside Japan.

We don't sell it or hand it to anyone. We do comply with lawful requests for disclosure.

About this policy

It may change. The date we last edited it is at the bottom of this page. Questions go to the address on the operator page.