Legal

Privacy Policy

Last updated: September 30, 2026

1. Information We Collect

Files you upload: We store files you share on our cloud storage solely for the purpose of providing the sharing service. Files are stored until you delete them or an admin removes them.
Usage data: We collect anonymized analytics (page views, device type, approximate location) to improve the service. This data cannot be used to identify you personally.
Cookies: We use cookies for analytics and advertising. You can decline cookies via our consent banner at any time.
Log data: Our servers automatically collect standard log data (IP address, browser type, timestamps) for security and debugging purposes.

To provide and maintain the sharing service — storing, processing, and delivering your files and links.
To analyze usage patterns and improve performance, reliability, and user experience.
To display relevant advertisements via Google AdSense (personalized or non-personalized, depending on your consent).
To detect, prevent, and address abuse, fraud, or illegal activity on the platform.
To comply with legal obligations and enforce our terms of service.

Shared files remain available indefinitely until you delete them or an admin removes them. There is no automatic expiration on share links.
Analytics data is retained for up to 14 months (Google Analytics default retention period).
Log data is retained for a maximum of 30 days before being automatically purged.
You can request deletion of your data at any time by contacting us — see section 6.

Google Analytics 4 — anonymized usage statistics to understand how the service is used.
Google AdSense — personalized and non-personalized advertising based on your consent preferences.
Vercel Blob — secure file storage infrastructure. Files are stored in encrypted cloud storage.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.

All data transmission is encrypted using TLS/SSL (HTTPS).
Files are stored in encrypted cloud storage with access restricted to authorized personnel only.
Admin access is protected by signed, HTTP-only session cookies with a 7-day expiry.
We regularly review our security practices to protect against unauthorized access, alteration, or destruction of data.

Access: Request a copy of the data we hold about you.
Deletion: Request removal of your data from our systems at any time.
Opt-out: Decline cookies and personalized advertising at any time via the consent banner.
Portability: Request your data in a commonly used, machine-readable format.
Complain: Lodge a complaint with a supervisory authority if you believe your rights have been violated.

GSO is not directed at children under the age of 13. We do not knowingly collect personal information from children.
If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page.
You are advised to review this privacy policy periodically for any changes. Changes are effective immediately upon posting.