Privacy Policy — share-pics.com

This Privacy Policy explains how share-pics.com ("we", "us", "our") collects, uses, and retains data when you use our file sharing and image conversion services. We are committed to processing personal data lawfully, transparently, and with minimal footprint.

1. Who We Are

share-pics.com is a file sharing and image conversion service. You can contact us at [email protected] for any privacy-related questions or requests.

2. Data We Collect

2.1 Files You Upload

Files uploaded for sharing are stored on Google Cloud Storage and are associated with a randomly generated link. We do not inspect or analyse the content of your files beyond what is necessary to serve them. Files are automatically and permanently deleted when their link expires or when you manually expire the link early.

Image files submitted for conversion are processed in memory, stored temporarily, and deleted automatically after 7 days.

2.2 Server Logs (Access Records)

When a shared file link is viewed or a file is downloaded, we record the following information and associate it with that link:

IP address — the IP address of the visitor
Country — derived from the IP address via Cloudflare headers or a one-time lookup against ip-api.com
User-Agent — the browser and operating system string sent by the visitor's browser
Referrer URL — the page the visitor navigated from, if provided by the browser
Preferred language — the language preference sent by the browser (Accept-Language header)
Timestamp — the date and time of the access

This data is used solely to provide analytics to the person who uploaded the file (e.g. "how many times was my link viewed and from which country"). It is not used for advertising, profiling, or any other purpose.

Access records are permanently deleted when the associated file link is deleted or expires.

2.3 Cookies

We use only functional cookies. We do not use tracking, advertising, or analytics cookies.

Cookie	Purpose	Duration
`lang`	Remembers your language preference (English or Spanish)	1 year
`recent_links`	Stores a list of file links you have uploaded so you can find them again	30 days
`recent_conversions`	Stores a list of image conversions you have performed so you can re-download them	7 days
`owner_[slug]`	Proves ownership of a specific uploaded file, enabling early expiration	Until link expires

Because these cookies are strictly necessary to provide the core functionality of the service, they do not require your prior consent under GDPR Article 6(1)(b) (performance of a contract / service delivery).

2.4 Data You Do Not Provide

We do not require you to create an account, provide your name, or share your email address to use the service. No account-linked personal data is collected from ordinary users.

3. Legal Basis for Processing

Functional cookies and file storage — Article 6(1)(b) GDPR: necessary to provide the service you request.
Access logs (IP address, user-agent, country, referrer) — Article 6(1)(f) GDPR: our legitimate interest in providing per-link analytics to file owners and preventing abuse of the service. These records are tightly scoped, short-lived, and automatically deleted with the associated file.

4. Data Retention

Uploaded files — deleted when the link expires (between 24 hours and 30 days from upload) or when you expire the link early.
Converted images — deleted 7 days after conversion.
Access logs — deleted when the associated link is deleted or expires. Never retained longer than the link they belong to.
Cookies — expire as stated in the table above and contain only data stored locally in your browser.

5. Third-Party Services

Google Cloud Storage — your uploaded files are stored on Google Cloud Storage servers in the United States. Google processes this data as a data processor under a Data Processing Agreement. See Google's DPA.
ip-api.com — if Cloudflare does not provide a visitor's country, the visitor's IP address is sent to ip-api.com to retrieve the country code. This lookup is performed at most once per file access. ip-api.com's privacy policy governs their use of this data.
Cloudflare — if the service is proxied through Cloudflare, Cloudflare may process network traffic data subject to Cloudflare's Privacy Policy.

We do not sell, rent, or share your personal data with any third parties for marketing purposes.

6. International Transfers

Uploaded files are stored on Google Cloud Storage in the United States. Google's Standard Contractual Clauses (SCCs) govern these transfers in accordance with GDPR Chapter V requirements.

7. Your Rights (EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under GDPR:

Right of access — you can request a copy of the personal data we hold about you.
Right to erasure — you can request deletion of your data. For file links, you can expire any link early at any time using the link management page, which permanently deletes the file and all associated access logs. You may also contact us at [email protected].
Right to object — you can object to processing based on legitimate interests (Article 6(1)(f)).
Right to restriction — you can request that we restrict processing while a dispute is resolved.
Right to portability — you can request a machine-readable copy of data you have provided to us.
Right to lodge a complaint — you have the right to complain to your local data protection authority. For EU residents, a list of authorities is available at edpb.europa.eu.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. California Privacy Rights (CCPA)

California residents have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To submit a request, contact [email protected].

9. Children's Privacy

This service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has used this service to upload content, please contact us immediately.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be noted by updating the "Last updated" date at the top of this page. Continued use of the service after a change constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, erasure requests, or complaints, please contact us at [email protected].