Privacy Policy — No Cookies, No Tracking, No Accounts — fff files
Last updated: July 3, 2026
Information we collect
We collect the minimum information needed to operate the service:
- IP address hash: Your IP address is hashed (SHA-256, truncated to 64 bits) and used solely for rate limiting. The raw IP is never stored or logged.
- Uploaded files: Files you upload are stored for 7-90 days depending on size, then permanently deleted. We do not scan, analyze, or inspect file contents except to verify file type during upload.
- Upload metadata: Original filename, file size, content type, and timestamp are stored to provide the service.
Information we do NOT collect
- Email addresses
- Names or personal identifiers
- Cookies or tracking data
- Analytics or usage data beyond rate limiting
- Payment information (the service is free)
How we use information
- IP hashes are used exclusively for abuse prevention (rate limiting).
- File data is stored solely to provide the file-sharing service.
- We never sell, share, or monetize any user data.
Data retention
- Files: Automatically deleted after 7-90 days depending on file size.
- File metadata: Retained for 30 days after file deletion for abuse investigation, then hard-deleted.
- Rate limit counters: Automatically expire after 1 hour.
Third-party services
fff files uses Cloudflare for file storage (R2), database (D1), and API hosting (Workers). Files are stored in Cloudflare's European data centers. Cloudflare does not access or use your files for any purpose. Cloudflare Privacy Policy.
Your rights (GDPR)
Under the GDPR, you have the right to access, rectify, or delete your personal data. Since we store no personal data (only hashed IPs), there is typically no personal data to provide. If you believe we hold data about you, contact us. File deletion is self-service via the delete link provided at upload.
Contact
For privacy inquiries or data requests, contact us at abuse@fffiles.com.