Privacy Policy – FileRack

Last updated: July 2025

Short version: We collect only what we need to run the Service. We do not sell your personal data. Information you choose to make public on your profile is visible to everyone.

1. Information We Collect

1.1 Information You Provide

Account data: username, email address, and hashed password when you register.
Profile data: display name, bio, location, occupation, interests, and website URL — only if you choose to add them.
Bookmark data: category names, site names, site URLs, optional username/email saved with a site, and optional site notes.
Communications: any messages you send to our support team.

1.2 Information Collected Automatically

Log data: IP address, browser type, pages visited, and timestamps — retained for up to 30 days for security and debugging.
Cookies: a session cookie to keep you logged in, and a localStorage key to remember your dashboard view preference. No advertising or tracking cookies.
Favicons: we use the Google Favicon API (https://www.google.com/s2/favicons) to display icons for saved sites. No user data is sent to Google beyond the site domain.

2. How We Use Your Information

To create and manage your account.
To display your public profile to visitors when you opt in.
To send transactional emails (email verification, password reset). We do not send marketing emails without your consent.
To detect and prevent abuse, fraud, and unauthorized access.
To improve and develop the Service.

3. Public Data & Visibility

What you make public is truly public. When your profile is set to public, your display name, bio, location, occupation, interests, website, and any bookmarks or categories you mark as public are accessible to everyone — including visitors who are not logged in, search engines, and other FileRack users who may import your bookmarks.

Only the site name and URL of public bookmarks are ever shared via the import feature — no passwords, private notes, or custom icons.
If you set your profile to private, your profile page becomes inaccessible to others and your identity is anonymized as Anon_[account number] anywhere it might appear.
You control which categories and individual sites are public via the toggles in your dashboard.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We may share data only in these limited circumstances:

Service providers: hosting, email delivery (transactional only), and error monitoring — bound by confidentiality agreements.
Legal requirements: if required by law, court order, or to protect the rights and safety of users or the public.
Business transfer: in the event of a merger or acquisition, with notice to users.

5. Data Retention

We retain your account and bookmark data for as long as your account is active. If you delete your account, your data is removed from live databases within 30 days. Anonymized aggregate statistics may be retained indefinitely.

6. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data (editable in your profile settings).
Delete your account and associated data.
Export your bookmark data (contact us if this is not yet automated).
Object to certain processing activities.

To exercise any of these rights, email support@filerack.com.

7. Security

We use industry-standard measures to protect your data: hashed passwords (bcrypt), HTTPS everywhere, CSRF tokens on all forms, rate limiting on sensitive endpoints, and input sanitization. No system is 100% secure — please use a strong, unique password and enable any available two-factor authentication.

8. Children's Privacy

FileRack is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we become aware of such collection, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy. We will notify you by email or by posting a banner on the site before significant changes take effect. The "Last updated" date at the top of this page reflects the current version.

10. Contact

Privacy questions or requests: support@filerack.com.

11. Advertising

FileRack may display advertising on any page of the Service at any time and without prior notice. We will not sell, rent, or trade your personal data with advertisers. Any advertising served will not use your personal bookmark data, private profile information, or account credentials for targeting purposes.

We are committed to being transparent about the data we collect and how we use it.