Privacy notice

1. Scope

ZeroLink operates this service from the United States. This notice covers ZeroLink’s File Storage, file-management, download and billing pages. Creating a vault does not require a ZeroLink account, name or email address. Stripe checkout may request payment and contact information.

2. File contents and encryption

Your browser packages files and filenames into a ZIP and encrypts it with AES-256-GCM before uploading. The storage service receives encrypted bytes rather than readable files or filenames.

The decryption key is in the fragment of the complete share link, after the # character. The app does not send that key to the storage API. Anyone with the complete link can decrypt the upload while it is available. Your device and recipients’ downloaded copies are outside this storage protection.

3. Information the service retains

• Encrypted file chunks and technical encryption metadata.
• Random vault and upload identifiers, file counts, byte sizes, storage usage, timestamps, expiry settings and upload status.
• A keyed hash and an encrypted copy of your access code, used to authenticate management requests and display the code through an authorized purchase receipt.
• Subscription status, plan, payment amount and paid-through date, plus Stripe references in a separate billing ledger.
• The most recently recorded completed-download time for an upload. Short-lived download sessions record delivered chunk numbers and expire after inactivity.

These records let the service enforce storage allowances, deliver downloads, renew subscriptions, prevent abuse and delete expired uploads. The download indicator records a completed transfer reported by the browser; it does not prove that someone opened or read a file.

4. Stripe and payment information

Stripe hosts checkout and processes card details. The File Storage app does not receive or store full card numbers or card security codes. Stripe may process billing contact details, payment information, device information and fraud-prevention signals according to its Privacy Policy .

Stripe references are kept in a separate ledger with a protected connection to the vault. ZeroLink can resolve that connection to operate subscriptions; separating the records does not make the payer and vault impossible to link. Authorized access to the Stripe account may reveal payment and customer details. Transactions clearly marked as test or sandbox transactions do not collect real subscription payments.

5. Browser storage, network data and tracking

Your selected language is saved in local storage on your device until you change it or clear site data. The app uses session storage in your browser for a purchase receipt and the current or previous upload link, including its decryption key. This can survive a refresh and may be restored by your browser. Saving your code, copying links and downloading text backups can also leave information on your device. Use the app’s clearing controls or clear browser site data when appropriate.

ZeroLink does not set cookies or load advertising trackers. The TrustedSite badge is an embedded image linking to an external verification page; displaying it makes no request to TrustedSite. Storage pages do not load visitor analytics. Stripe’s hosted checkout and TrustedSite’s external verification page have their own cookie and privacy practices.

Network requests necessarily expose connection information such as IP addresses to the server and network providers. Storage rate-limit counters use rotating keyed identifiers instead of storing raw IP addresses in the vault database. Hosting providers and operational systems may process connection information and diagnostic records; this service does not promise network anonymity.

6. Retention and deletion

Active encrypted uploads remain available through the subscription’s paid-through date unless you delete them sooner. When monthly access expires, uploads are retained for a seven-day renewal window, then removed by scheduled cleanup. Incomplete uploads are eligible for cleanup after 24 hours. The service schedules cleanup every five minutes; service interruptions can delay it.

Owner-requested deletion removes the upload from your vault and immediately disables its link. Encrypted objects are then deleted from storage; if a provider request fails, a persistent cleanup queue retries deletion. Interrupted uploads can leave unreferenced encrypted chunks, which become eligible for cleanup after ten minutes. Share-link expiry alone does not delete files. Download-session records expire after 15 minutes of inactivity and are removed by cleanup; the latest completed-download timestamp remains with the upload. Rate-limit counters also expire on a short window.

Deleting an upload does not automatically erase vault, subscription or Stripe records. The current implementation does not automatically erase all billing records on a fixed schedule. Historical records or backups may retain information separately. You can request review or deletion of personal information by contacting [email protected]. Retention and deletion decisions take into account the ongoing subscription, payment disputes, fraud prevention and applicable accounting or legal obligations. We do not promise immediate removal of all historical records when a file is deleted.

7. Service providers and required disclosures

DigitalOcean provides server hosting and private object storage for encrypted uploads. Object names use random identifiers rather than your filenames; file-decryption keys are not sent to DigitalOcean Spaces. Hosting and payment providers process information needed to run the service. We may disclose information we hold when required by valid legal process or when necessary to investigate abuse, protect the service or address security incidents. The encryption design limits readable file content available to the storage server; it does not eliminate operational or billing information.

8. Your controls and requests

Use your access code to view usage, delete uploads, change your plan or cancel renewal through Manage Billing . Keep the code private: the same code authorizes file and billing actions. Lost codes and missing share-link decryption keys cannot be recovered through the service.

Depending on applicable law, you may have rights to request access, correction or deletion of personal information. We may need to verify authority over a request without disclosing another person’s vault. Contact ZeroLink at [email protected] for privacy requests or support. Do not include access codes, full share links or card details. Information you choose to include in a support email will be processed to respond to your request. Stripe provides separate controls for information it holds.

9. Changes to this notice

We may update this notice to reflect changes in the service or how information is handled. We will publish the updated notice and revision date here. Any additional notice or consent required by applicable law will apply.