Privacy policy

At CrossUpload we respect your privacy. This policy describes what data we process, for what purposes and what rights you have. By using the service you accept this policy together with the Terms of Use.

1. Data controller

The controller of data related to the web service is the operator of CrossUpload (site: www.crossupload.org). To exercise rights or make privacy inquiries, use the Contact form.

2. Data we collect

2.1 Account data

• Username
• Email address
• Password (stored hashed/encrypted; we cannot see your plain-text password)
• Registration date and, where applicable, last login
• Storage quota and usage

2.2 Files you upload

• Original file name, size, MIME type and technical metadata needed for the service
• The file content itself, hosted on CrossUpload servers (including storage infrastructure linked to the service and file subdomains)
• Share links, public/private status and download counters

2.3 Technical and contact data

• IP address and connection data (security and abuse logs)
• Messages you send via the contact form (name, email, subject and message)
• Session cookies needed to keep you signed in and for CSRF protection

3. Purposes of processing

• Provide file storage and sharing
• Authenticate users and protect accounts
• Apply quota limits and usage policies
• Respond to support requests
• Prevent fraud, abuse and security attacks
• Comply with legal obligations when required

We do not sell your personal data to third parties for advertising.

4. Where data is stored

Account data and the web application database are hosted on the site host for www.crossupload.org. User files are stored on CrossUpload servers, which may include dedicated storage servers (for example, reachable via service subdomains). Those servers may be located in data centers of infrastructure providers (VPS/hosting) contracted by CrossUpload.

By using the service you accept transfer and hosting of your files on that infrastructure so we can offer uploads and downloads.

5. Retention

• Account data is kept while the account is active.
• Files are kept until you delete them or while the account exists, unless removed for abuse or legal requirement.
• Contact messages may be kept as needed to handle the request and improve support.
• Security logs may be retained for limited periods to investigate incidents.

6. Sharing with third parties

We may share data only when necessary to:

• Infrastructure providers (hosting, VPS, network, SSL) that process data under our instructions
• Comply with a valid court order or legal request
• Protect the rights, security or integrity of CrossUpload and its users

7. Public links and visibility

If you make a file public or share its link, anyone with the link may download it. CrossUpload does not control how they forward or publish that link. Use the private option when you do not want wide distribution.

8. Cookies and session

We use cookies or session storage strictly necessary to:

• Keep you signed in
• Protect forms (CSRF token)

We do not use third-party ad networks in the core file service. If analytics are added later, this page will be updated.

9. Security

We apply reasonable measures: hashed passwords, share tokens, blocked dangerous file types, HTTPS on the website and, when available, on file servers. No system is 100% invulnerable; use strong unique passwords.

10. Your rights

Under applicable law you may request access, correction or deletion of account data, and delete files from your panel. For further requests, contact us via Contact / Support. We may ask you to verify account ownership.

11. Minors

The service is not directed at minors without parental supervision and consent where required by law. If we find a minor’s account without authorization, we may delete it.

12. Changes to this policy

We may update this Privacy Policy. The current version will be published at this URL with the update date.

13. Contact

Privacy questions: www.crossupload.org/contacto.php

Thank you for trusting CrossUpload.