1. Information We Collect

InvisHosting collects minimal data as required by EU law:

• IP Addresses — Stored for upload cooldown enforcement, abuse prevention, and legal compliance
• File Metadata — Original filename, file size, upload timestamp, and download count
• Account Data — Username, email (optional), and hashed password for registered users
• Cookies — Essential cookies for session management and preferences

2. How We Use Your Data

• Enforcing upload cooldown periods
• Preventing abuse and protecting the Service
• Complying with legal obligations (law enforcement requests, DMCA)
• Improving the Service and fixing bugs
• Displaying advertisements via AADS

We do not track your browsing habits, sell your data to third parties, or use your data for profiling.

3. Cookies

We use the following types of cookies:

• Essential Cookies — Required for the Service to function (session management, CSRF protection, cookie consent preferences)
• Advertising Cookies — Used by our ad partner AADS to display relevant advertisements. These are always active as they are essential for funding the free Service.

4. Data Retention

• IP addresses — Retained as long as associated files exist
• File metadata — Retained until the file is deleted
• Account data — Retained until account deletion is requested
• Server logs — Retained for up to 30 days

5. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your personal data ("right to be forgotten")
• Portability — Request your data in a portable format
• Objection — Object to processing of your personal data

To exercise these rights, contact us at the email provided in the footer.

6. Data Security

We implement appropriate technical measures to protect your data, including:

• HTTPS encryption for all connections
• Secure password hashing (bcrypt)
• CSRF protection on all forms
• Rate limiting on sensitive endpoints
• Regular malware scanning of uploaded files

7. Third-Party Services

• AADS — Advertisement display (privacy-friendly crypto ads)
• Google reCAPTCHA — Bot prevention on uploads and registration
• VirusTotal — Malware scanning of uploaded files (file hashes are shared)
• Cloudflare — CDN and DDoS protection

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service constitutes acceptance of the updated policy.

9. Contact

For privacy-related inquiries, please contact us using the Contact link in the footer.