Privacy Policy
Last updated: 15 November 2026
Upload-Here ("we", "us") is committed to protecting your privacy. This policy explains what personal data we process when you use upload-here.com and our upload links, and why.
Files uploaded through upload links
Files uploaded through an upload link are sent directly from the uploader's browser to the cloud storage of the link owner (Amazon S3, Google Cloud Storage, Azure Blob Storage or an S3-compatible service). They never pass through or are stored on our servers. The link owner is the controller of those files and responsible for their storage and security.
For each upload we keep its status and time, and per link the number of files and their total size (needed for limits). File name, size, content type and storage key are kept only while the upload is in progress, unless the link owner turns on "Keep a file list" for that link; then they are stored and shown to the owner.
Account data
When you create an account we process your name and email address (provided through our authentication provider Kinde), your plan and subscription status, the upload links you create, the logo you upload for your upload pages (Pro plan) and usage statistics.
Storage credentials
Cloud storage credentials you provide are encrypted with AES-256-GCM before being stored and are used only to create short-lived upload URLs for your links. We never share them with third parties.
Payments
Payments are processed by Paddle.com, our Merchant of Record. We do not receive or store card details. Paddle shares with us your customer and subscription identifiers and subscription status.
Processors
We use the following service providers to run Upload-Here:
- Hostinger — server hosting (European Union)
- Kinde — authentication
- Paddle — payments and invoicing
Cookies
We use only cookies that are strictly necessary for signing in and keeping you signed in. We do not use advertising or tracking cookies.
Usage statistics
We don't use analytics cookies or tracking scripts. Like every web server, our hosting records an access log for each request (IP address, time, page, browser, referring website and response status). We use it for security, troubleshooting and aggregate traffic statistics; in those statistics IP addresses are shortened (the last part removed), and the logs themselves are deleted on a rolling basis. For signed-in users we store the country at sign-up, derived from the IP address using an offline database (IP Geolocation by DB-IP) without storing the IP, and the time of last activity.
Retention
Account data is kept while your account exists. Upload metadata is kept while the related link exists. When you delete a link or your account, related data is deleted. Paddle retains billing records as required by law.
Your rights
Under the GDPR you have the right to access, correct, export and delete your personal data and to object to or restrict its processing. To exercise these rights, contact us at info@upload-here.com. You may also lodge a complaint with your local data protection authority.