At Patrins, we respect your privacy. This policy explains what data we collect, how we use it, and your rights regarding your information. Please read carefully.
§ 01
Introduction
At Patrins, we respect your privacy. This policy explains what data we collect, how we use it, and your rights regarding your information.
§ 02
Information We Collect
We collect various types of information to provide, operate, and secure our file hosting services:
Account Information
When you create an account, we collect:
Email addressUsed for account login, identity verification, and notifications.
Display nameYour name as shown on the platform.
Profile pictureProvided via Google or Yandex OAuth if you choose to sign in with one of them.
Password (optional)Stored only as a bcrypt hash if you set one. Accounts that sign in exclusively via Google/Yandex store no password.
Two-factor authenticationIf you enable 2FA: a TOTP secret and one-way hashes of your backup codes, used solely to verify your sign-ins. Removed immediately when you disable 2FA.
File Metadata
When you upload files, we store:
File namesOriginal names of uploaded files to preserve their context.
File sizesTo track storage usage against your plan limit.
Upload datesWhen files were uploaded.
File typesMIME types for proper handling and previews.
File Contents
Files you upload are stored on our servers. We do not read, process, or analyze the contents of your files beyond what is necessary to generate thumbnails for image and video files. We do not scan file contents for advertising or profiling purposes.
Usage Data
We collect basic usage information to operate and improve our service:
Access logsTimestamps, requested URLs, and approximate country (derived by Cloudflare). We do not log or store your IP address — not at sign-up, login, download, or in analytics. Server logs contain no IP addresses and are automatically rotated and deleted within 30 days.
Session locationsEach signed-in session displays a coarse location label (city / region / country) derived by Cloudflare at the network edge, so you can spot sessions that aren't yours. We store only this text label — never the IP address it was derived from.
Anti-abuse pseudonymsFor download counting and rate limiting we may store a keyed one-way hash derived from request data. It cannot be reversed into an IP address, and the raw IP is never written to disk.
Download countsHow many times a file has been accessed.
File analyticsUploaders see aggregate, anonymous statistics for their own files: viewer country, browser, operating system, and device type. No IP addresses, no persistent identifiers, no cross-site tracking.
Device informationBrowser type and operating system, read from your browser's user-agent — used for compatibility and the anonymous analytics above.
Shipping Information (Physical Export)
If you order a Physical Data Export, we collect the delivery details you provide, solely to fulfil and ship your order. We do not use them for marketing.
Delivery detailsRecipient name, postal address, city, postal code, country, and phone number — used only to ship your drive and provide tracking, and shared with the shipping carrier for delivery.
Drive keyThe key that unlocks your encrypted drive is generated for your order and stored encrypted at rest. It is revealed to you in your dashboard once the order ships.
§ 03
How We Use Your Information
We use the collected information to:
Provide our service: Store and deliver your files.
Improve performance: Optimize speed and reliability.
Send notifications: Account updates and important announcements.
Prevent abuse: Detect and prevent malicious activity.
Comply with laws: Respond to valid legal requests.
§ 04
Data Storage and Security
Your files and data are stored on servers in Germany (Hetzner Online GmbH), subject to EU/GDPR data protection laws. We apply the following protections:
Encryption in transit: All data transfers use HTTPS/TLS.
Access controls: Strict authentication and authorization on all endpoints, with optional two-factor authentication (TOTP) for your account.
Credential protection: Passwords are stored only as bcrypt hashes; 2FA backup codes only as one-way hashes. We can never see your password.
Regular backups: Automated, integrity-verified backups of account data, replicated to a second server we operate in the same Hetzner Germany region. Backup copies are kept for up to 30 days.
Encryption Level: Files are stored as uploaded. We do not apply end-to-end encryption or zero-knowledge storage — your files are accessible to us at the infrastructure level. We do not access them for non-operational purposes.
§ 05
Data Sharing
We do not sell your personal information. We may share data only in these cases:
With your consent: When you explicitly share files or folders with others.
Infrastructure providers: Hosting and CDN providers that process data on our behalf.
Legal requirements: When required by valid legal process.
Business transfer: In the event of a merger or acquisition.
§ 06
Your Rights
You have the following rights regarding your data:
Access: Request a copy of your personal data.
Deletion: Delete your account and all associated data.
Correction: Update or correct your information.
Export: Download your files at any time via the dashboard or WebDAV.
Data portability: Download a machine-readable copy of your account data — settings, an analytics summary, and records of your files, links and sessions — anytime from Settings → Export.
GDPR rights: EU/EEA residents may contact us to exercise rights under GDPR.
§ 07
Data Retention
We retain your data as follows:
Active filesStored until you delete them.
Temporary filesAutomatically deleted after 7 days.
Deleted filesPermanently removed within 30 days.
Account dataDeleted within 30 days of account deletion.
Access logsContain no IP addresses; rotated automatically and deleted within 30 days.
BackupsRolling backups of account data are kept for up to 30 days; deleted data ages out of backups within that window.
§ 08
Cookies
We use cookies for:
AuthenticationKeep you logged in (JWT stored in a secure cookie).
PreferencesRemember your settings such as theme.
We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings, though disabling authentication cookies will log you out.
§ 09
Third-Party Services
We use the following third-party services:
Hetzner OnlineServer hosting in Germany (all storage and application servers).
CloudflareCDN and security layer in front of patrins.com. Cloudflare terminates connections at its edge and derives the coarse country/region labels we use. We do not store the IP addresses it forwards to us.
Google OAuthOptional account sign-in. We receive your email, name, and profile picture.
Yandex OAuthOptional account sign-in. We receive your email, name, and avatar.
PayPalPayment processing (Pro and Unlimited plans).
PolarCard payment processing.
NOWPaymentsCryptocurrency payment processing.
Shipping carrierIf you order a Physical Data Export, your delivery details are shared with the courier (e.g. DHL) to ship your drive and provide tracking.
These services have their own privacy policies. We encourage you to review them.
§ 10
Children's Privacy
Patrins is not intended for users under 13 years of age. We do not knowingly collect information from children. If we discover that a child has provided us with personal information, we will delete it immediately.
§ 11
Changes to This Policy
We may update this privacy policy from time to time. Significant changes will be noted on our website. Continued use of Patrins after changes are posted constitutes acceptance of the updated policy.
§ 12
Contact Us
If you have questions about this privacy policy or how we handle your data, please contact us at:
