Privacy Policy

• Account data: email and a hashed password (we never see or store the original password).
• Usage data: the URLs you submit, the host detected, the resulting file size, and timestamps — required to enforce per-host daily limits.
• Billing data: handled by Stripe, PayPal, or NowPayments. We store only a payment reference; we never see card numbers.
• Technical data: IP address (for fraud prevention), browser user-agent, and standard server logs.

• To provide the link generation service.
• To enforce daily download caps and prevent abuse.
• To process payments and prevent fraud.
• To respond to support requests.

• Inspect, store, or share file contents.
• Sell your data or share it with advertisers.
• Track you across third-party websites.

We use a single first-party session cookie for authentication. We do not use third-party tracking cookies.

Limited data is shared with the third-party providers that power the Service:

• The originating file host (your link is forwarded for processing).
• Stripe / PayPal / NowPayments (payment processing).
• Our infrastructure providers (hosting, database, email).

Account data is retained while your account is active. Bandwidth ledger entries are retained for at least 90 days for fraud prevention and abuse investigation. Deleted accounts and their personal data are removed within 30 days.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. You can delete your account directly from the Dashboard, or email support@debridly.com for other requests.

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data from children.

We will post changes to this policy on this page. Material changes will be announced by email or in-app notification.