Privacy

Accounts store a name, email address, and a password hash. A submitted link is encrypted at rest and also stored as a one-way hash so a blocked resource can be recognized without keeping a public copy of the address.

Download history is private to the account or guest session that created it. Guest jobs are tied to a session capability, not published. Retention follows the operator setting, after which expired jobs and grants are deleted by the reconciliation command.

Advertising, when a network is approved and you opt in, does not receive the URL or title you submitted. Server logs record error codes and record identifiers, not the raw link.