Privacy Policy
Last updated: March 2026
What we collect
When you upload a file, we collect your email address (for verification only), the file metadata (name, size, type), and your IP address (for rate limiting). We do not create accounts or track you across sessions.
How we use your data
Your email is used solely to send you a verification link. We do not send marketing emails, sell your data, or share it with third parties. IP addresses are used only for rate limiting and abuse prevention.
Data retention
Uploaded files are automatically deleted after 7 days. Email addresses are retained for a maximum of 30 days and then permanently deleted. Unverified uploads are purged within 1 hour.
Where your data is stored
Files are stored on Amazon Web Services (AWS) S3 in the US East region. Data is encrypted in transit via TLS and at rest via AES-256.
Your rights
Under GDPR and POPIA, you have the right to request deletion of your data at any time. Contact privacy@sto.care for any data-related requests.
Contact
For privacy concerns, reach us at privacy@sto.care. For abuse reports, contact abuse@sto.care.