Last updated: March 2026
Your files stay on your device. Period. Everything processes in your browser — we never see your files, never store them, and couldn't access them even if we wanted to.
Your files never leave your browser. The code runs locally on your device — nothing gets transmitted to our servers.
We use localStorage for preferences and payment status. No tracking cookies. Anonymous analytics via Vercel only.
Stripe handles everything. We get your email and a confirmation. We never see or store card details — ever.
Stripe for payments. Vercel for hosting and anonymous analytics. That's the full list — no others.
We use localStorage — not cookies — for a handful of things. All of it stays on your device:
None of these values are ever sent to us. We can't read them, and they're not shared with anyone.
If you create an account (via email or Google/GitHub sign-in), we store your email and a session token. We don't store passwords.
If you sign in with Google or GitHub, we receive your email, name, and profile photo from that provider. We don't access your files, contacts, or anything else from those accounts.
We store a session token in your browser to keep you signed in. It's not a tracking cookie — it's just how login works. Sign out any time to clear it.
You can delete your account from the Account page at any time. This permanently removes your user record, OAuth links, and subscription data. No waiting period, no hoops.
Paid subscription data is retained as long as your account exists. Everything else is either in your browser or not collected at all.
Email us at privacy@filagram.com.