FileSmuggle – Privacy Policy
Last updated: February 10, 2026
This Privacy Policy explains how FileSmuggle (“we,” “our,” or “us”), a trading name of Tinker Trade LTD, collects, uses, and protects your information. We act as the "Data Controller" for the personal data processed through our Service.
1. Information We Collect
To provide a high-speed, secure transfer service, we collect the following:
- Account Information: Email address and payment details (processed securely via Stripe/PayPal) when you subscribe to a paid plan.
- Technical Data: IP address, browser type, and device metadata to prevent bot abuse and ensure system stability.
- Transfer Metadata: File size, file name, and expiration timestamps. We do not open or read the contents of your files.
2. How We Use Your Data (Legal Basis)
Under the UK GDPR, we process your data based on:
- Contractual Necessity: To provide the transfer service you have requested or purchased.
- Legal Obligation: To prevent fraud, money laundering, or the distribution of prohibited content.
- Legitimate Interests: To improve site performance and security.
3. File Security & Encryption
- Transit Security: All files are "smuggled" using SSL/TLS encryption during the upload and download process.
- Storage Privacy: Files are stored on secure servers (via Pushr.io infrastructure) and are inaccessible to the public unless they have your unique "Tiny Link."
- Zero-Knowledge Vibe: We do not index your files or make them searchable.
4. Data Retention & Deletion
- Automated Purge: Files are automatically and permanently deleted from our servers once the expiration period (1–20 days) is reached.
- Account Data: We retain account information for as long as your subscription is active, or as required by UK tax law (usually 6 years for financial records).
5. Third-Party Processors
We only share data with trusted partners necessary to run the service:
- Storage: Pushr.io (for encrypted file hosting).
- Payments: Stripe and PayPal (we do not store your full credit card numbers on our servers).
- Security: Cloudflare (for DDoS protection and firewall).
6. International Transfers
As a global service, your data may be processed on servers located outside the UK/EEA. We ensure all "transfers" comply with UK data protection standards through encrypted tunnels and standard contractual clauses.
7. Your Rights (GDPR)
As a user, you have the following rights:
- The right to Access the data we hold about you.
- The right to Rectify (correct) your information.
- The right to Erasure ("Right to be forgotten").
- The right to Withdraw Consent for marketing at any time.
8. Cookies & Tracking
We use "Functional Cookies" only—these are necessary to keep you logged in and to manage your 20GB "Tiny Links." We do not use third-party advertising trackers or sell your data to brokers.
9. Children’s Privacy
FileSmuggle is not intended for individuals under the age of 13. If we discover data has been collected from a child, it will be deleted immediately.
10. Contact Our Data Officer
For any privacy-related inquiries or to exercise your data rights, contact:
- Data Controller: Tinker Trade LTD
- Email: support@filesmuggle.com
- Website: https://filesmuggle.com