Privacy policy

FileSanity is run by authegg (AUTHEGG SOFTWARE DEVELOPMENT SERVICES, a sole proprietorship registered with the DTI), an independent studio based in the Philippines. Write to hello@filesanity.com about anything on this page.

They are read and rewritten inside your browser. We never receive them, so we cannot store, read or share them. This holds for single files and for batches.

We run no advertising or cross-site tracking. We count visits with Cloudflare Web Analytics, which sets no cookie and does not identify you: it records the page, the referring site, your country, browser and device type, and how fast the page loaded. A link in an email we sent you may carry a number, so we can count how many times that link was followed; the count holds nothing about who followed it. Our host, Cloudflare, processes the technical data any web request carries (your IP address, browser, the page asked for) to deliver the page and stop attacks, under its own privacy policy. We set no cookie unless you sign in.

The extension cleans files inside your browser as you upload them, and never sends a file, a file name or a website address to us or anyone else. It runs no analytics. It keeps, in your browser's extension storage only: the count of files cleaned, the sites where you paused it, and, if you connect a paid account, your connection token, plan and saved policy, your site rules and a log of your last 100 cleans (when, the site, the file name and how many fields were removed). Removing the extension deletes all of it.

If you connect an account, the extension sends your connection token to filesanity.com to read your plan and saved policy, and nothing else. You can disconnect the extension from your account page at any time.

If you create an account we keep: your email address; your plan, its status and renewal date; your API keys' names, creation dates and last four characters, with the keys stored only as hashes; Paddle's customer and subscription ids for a paid plan; the email addresses you add to a team; your saved policy; and a monthly count of API files. We use them to run your account and nothing else.

Sign-in emails are sent through Cloudflare Email Sending, which processes your email address for that purpose. Signing in sets one cookie, fs_s, needed to keep you signed in; it lasts 30 days or until you sign out. Your account page also keeps your plan's name in this browser's storage, so the pricing page can mark it without asking our server; signing out removes it. The sign-in page uses Cloudflare Turnstile to block automated requests.

The paid plans are sold by Paddle, acting as merchant of record. It collects your payment details, billing address and tax information under its own privacy policy and tells us your email address, plan and subscription status. We never see your card.

A file sent to the API is cleaned on Cloudflare's network for the length of one request. Up to 25 MB it is held in memory only, never written to disk. A larger file, on a paid plan, is written for that request to Cloudflare R2 storage (encrypted at rest) under a random name, read from there, and deleted as soon as the reply has been sent; a storage rule deletes anything a dropped connection leaves behind within a day. Neither is logged. We keep only the count of files for your quota.

Account data is kept while the account exists and deleted within 30 days of a request to close it; payment records are kept by the merchant of record as tax law requires. Under the Philippine Data Privacy Act of 2012, and similar laws where you live, you can ask to see, correct, export or delete your data, and complain to the National Privacy Commission. Email hello@filesanity.com from your account's address.

If this policy changes, the date above changes, and account holders are emailed about any change to what we collect.