1. Information we collect
Depending on how you use Invisible Folder, we may collect account data such as your email address, password hash, verification status, and basic profile identifiers; upload data such as file names, file sizes, MIME types, access settings, link identifiers, ownership information, and the files themselves; and security data such as IP addresses, user agents, timestamps, request details, and abuse-prevention signals.
If you consent to analytics, we also collect usage information through Microsoft Clarity, such as pages visited, interaction events, heatmaps, anonymized session recordings, and basic browser/device details. Analytics never loads without your consent, and you can withdraw it at any time.
If you contact us, report content, or respond to a trust-and-safety inquiry, we may also keep the contents of that communication and any records needed to resolve the issue.
2. How we use information
We use information to provide uploads and downloads, authenticate users, send requested access codes, enforce access controls, prevent spam and automated abuse, investigate illegal or harmful material, maintain platform security, communicate about accounts or support issues, comply with law, and improve reliability.
Because Invisible Folder is a file hosting service, uploaded files and related metadata may be reviewed or otherwise processed when reasonably necessary to detect abuse, enforce our terms, respond to complaints, or satisfy legal obligations.
3. Cookies, tracking, and consent
We group cookies and similar technologies into two categories:
- Strictly necessary. Session management, CSRF protection, abuse prevention, CAPTCHA, and the fonts used to render the interface. These are required for the site to function and are not consent-based. If you block strictly necessary cookies, some parts of the site may not work.
-
Analytics. Microsoft Clarity, which uses cookies (such as
_clckand_clsk) to produce heatmaps, anonymized session recordings, and usage statistics. Clarity's script, cookies, and tracking only load after you consent.
The first time you visit, a privacy banner asks for your choice. Optional technologies stay off until you actively opt in — there are no pre-ticked boxes, and “Reject optional” is as easy to choose as “Accept all”. Your choice is stored in a first-party consent cookie (if_cookie_consent) that lasts up to one year and is itself strictly necessary, because it remembers your decision.
You can review or change your choice at any time — including withdrawing consent — by using the shield-shaped privacy preferences button at the bottom-left of any page. Withdrawal is as easy as giving consent. When our tracking arrangements materially change, we update the consent policy version and ask again.
To demonstrate that consent was properly requested and recorded (as required by GDPR-style law), we keep a consent record for each choice: the decision itself, a one-way hash of your IP address, a one-way hash of your browser's user agent, the page it was made on, and a timestamp. We never store raw IP addresses or user agents in these records, and they are automatically deleted after two years.
4. Legal bases for processing
Where applicable privacy law requires a legal basis, we generally process information because it is necessary to perform our contract with you, because it serves legitimate interests such as operating and securing the platform, because we need to comply with legal obligations, or because you gave consent where consent is required.
5. Sharing and disclosures
We may share information with service providers that help us host the site, store files, deliver content, send email, process payments, or prevent abuse. We may also disclose information to law enforcement, regulators, rights holders, or other third parties when we believe disclosure is required by law, supported by valid process, or necessary to protect users, the public, or the service.
If you choose a public or openly shared file setting, the file and related metadata may be accessible to anyone who has the relevant URL or permission. Choose access settings carefully.
6. Retention
We retain information for as long as needed to operate the service, maintain security logs, honor deletions or expirations, resolve disputes, enforce our agreements, and satisfy legal obligations. Deleted files and accounts may remain in backups or audit records for a limited period before being removed in the normal course. Consent records (hashed IP, hashed user agent, choices, and timestamps) are kept for a maximum of two years and are purged automatically.
7. International transfers
Invisible Folder may process or store information in the United States or other countries where our providers operate. If you access the service from another jurisdiction, you understand that your information may be transferred there.
8. Your privacy rights
Depending on where you live, you may have rights to request access to personal information, correction of inaccurate data, deletion, restriction, objection, portability, or withdrawal of consent where processing relies on consent. You may also have the right to complain to a supervisory authority. Where processing is based on consent, you can withdraw it yourself at any time using the privacy preferences control at the bottom-left of any page — no request or account required.
To make a privacy request, email [email protected]. We may ask for information needed to verify your identity before completing a request.
9. Children and unlawful material
Invisible Folder is not intended for use in connection with illegal material or by anyone using the service for unlawful purposes. If we learn that the service is being used to store or distribute exploitative material involving minors or other clearly illegal content, we may remove the material, preserve evidence, terminate access, and report the matter to appropriate authorities.
10. Changes to this policy
We may update this Privacy Policy from time to time. The version published on this page is the current version.