Privacy Policy

Privacy Policy

Last updated: August 2025

Summary: MyMegaFile.com respects your privacy. We operate a free, ad-funded file upload service. We do not sell user data and we store minimal information. This policy explains what we process, why, and your rights.

Data We Collect

• We do not offer personal accounts at this time; we do not store registration data.
• We do not store IP addresses in our own systems.
• We use session cookies for essential site functionality (no tracking cookies set by us).
• Cloudflare (our CDN / security provider) may temporarily process technical data such as IP addresses, timestamps, and browser metadata for performance and security.
• Uploaded files are stored to provide the service and are not analysed by us beyond operational needs.

Purpose and Legal Bases for Processing

We process data for the following purposes and legal bases (where applicable):

• Providing the service: necessary for the performance of our service and its hosting (operational necessity).
• Security & abuse prevention: legitimate interest in protecting the platform and users (e.g. DDoS protection, firewalling via Cloudflare).
• Advertising: to display ads that finance the free service (legitimate interest and third-party advertising networks’ own lawful bases).
• Cookies & session management: necessary for site functionality (session cookies: legitimate interest).

Third-Party Services

• Cloudflare (CDN & Security) — used to deliver assets and protect the site (caching, DDoS mitigation, WAF). Cloudflare may process IP addresses and browser data. See Cloudflare’s privacy information: Cloudflare Privacy Policy.
• Google Fonts — currently used to serve web fonts. Loading fonts from Google servers may transmit your IP address and technical data to Google. We are transitioning to local hosting of fonts to remove this external request. See: Google Fonts Privacy.
• Advertising networks — we show ads from third-party networks to fund the service. Those networks may set cookies or process data under their own policies. You should consult the ad partners’ privacy notices for details.

Cookies

We set only essential session cookies to maintain functionality during your visit. We do not set tracking or marketing cookies ourselves. Third-party services (Cloudflare, advertising networks) may set their own cookies according to their policies.

Security & Data Retention

We use HTTPS (TLS) to protect data in transit. Cloudflare provides additional protections such as bot management and WAF rules. We do not retain IP addresses or logs in our systems; Cloudflare may retain certain security logs subject to its retention policies.

GDPR / DSGVO Compliance (EU Data Protection)

If you are an EU/EEA resident, the General Data Protection Regulation (GDPR / DSGVO) provides you with certain rights. Where GDPR applies, we comply with its requirements as follows:

• Lawful bases: we rely on performance of the service, our legitimate interests (security, platform integrity, serving ads), and where applicable, consent for specific third-party cookies.
• Data transfers: some third parties (e.g., Cloudflare, Google) may process or transfer data outside the EEA. These third parties use appropriate safeguards—see their privacy policies for details.
• Data minimization: we minimize processing and do not keep personal data in our systems where feasible.
• Data subject rights: you have the right to access, rectify, delete, restrict processing, object to processing, and request data portability where applicable. To exercise your rights, contact us (see below). Because we do not store personal account data, many requests will be answered by confirming we hold no personal data about you.
• Supervisory authority: if you are not satisfied with our response, you have the right to lodge a complaint with a competent data protection authority in the EU/EEA member state of your habitual residence, place of work, or the place of an alleged infringement.

Your Rights & How to Contact Us

You may request:

• Access to any personal data we hold about you
• Correction of inaccurate data
• Deletion of data (where we have no legal reason to retain it)
• Restriction of processing
• Objection to processing based on legitimate interests
• Data portability where applicable

To exercise these rights or ask privacy questions, contact:

Primary contact: [email protected]
Abuse reports: [email protected]

Limitations & Notes

We do not sell user data. We do not create user accounts at present, so we generally hold minimal personal information. Third-party services we use (Cloudflare, ad networks, Google) may collect and process additional technical information under their own policies. Please consult those providers for full details.

Changes to This Policy

We may update this Privacy Policy occasionally. Any material changes will be posted here with a revised "Last updated" date.