Privacy policy
How we handle your data
Snow is built on zero-knowledge encryption. We collect as little as possible and are transparent about what we do collect.
Data controller
Snow (encrypt-files.com) is operated by FROSTCRYPT LLC. We are responsible for the processing of personal data as described in this policy. For any privacy-related questions, contact us at privacy@encrypt-files.com.
Effective date: March 13, 2026
What we collect
Data collection and legal basis
Account data
If you create an account, we store your email address, a hashed password (never plaintext), your display name, and the date your account was created. Legal basis: contract performance. You need an account to use authenticated features.
File metadata
When you upload a file, we store encrypted shards, expiry timestamps, download limits, and optional access codes. We never see the file contents, file names, or encryption keys. Your encryption key stays in the URL fragment and never reaches our servers.
IP addresses
Geolocation (currency and language detection) is done locally on our servers using a local database. Your IP address is never sent to any third party. We do not store raw IP addresses. For abuse prevention, we store a one-way hash of your IP that cannot be reversed to identify you.
Legal basis summary
Account data: contract performance. IP geolocation: legitimate interest (localizing the experience). IP hashing for abuse prevention: legitimate interest (protecting the service). File metadata: contract performance (delivering your files).
Local storage
Cookies and browser storage
Session cookies
We set a single session cookie only when you log in to an account. It is used solely for authentication. We do not use analytics cookies, tracking pixels, or fingerprinting of any kind.
localStorage
We store your language preference, upload history, and paste history in your browser's localStorage. This data never leaves your device and is not sent to our servers. You can clear it at any time through your browser settings.
External services
Third-party services
Cloudflare R2
Encrypted file shards are stored on Cloudflare R2. Cloudflare only receives encrypted data and cannot decrypt your files. Cloudflare's infrastructure is subject to their own privacy policy.
Proton Mail (SMTP)
Verification and notification emails are sent through Proton Mail. Your email address is shared with Proton only for the purpose of delivering these messages.
How long we keep it
Data retention
Uploaded files are automatically and permanently deleted at the expiry time you choose. There are no backups and no recovery. Account data is retained while your account exists. If you delete your account, all associated data is removed. Hashed IP records for abuse prevention are retained for up to 90 days.
GDPR rights
Your rights
Under GDPR, you have the right to access, correct, delete, or export your personal data. You can also object to processing or request that we restrict it. We will respond to all requests within 30 days. If you have an account, you can delete it and all associated data directly from your settings. For any requests, email us at:
Incident response
Data breach notification
In the event of a data breach that poses a risk to your rights, we will notify the relevant supervisory authority within 72 hours as required by GDPR. If the breach is likely to result in a high risk to you, we will notify you directly. Because Snow uses zero-knowledge encryption, a server breach would not expose your file contents or encryption keys.
Age restriction
Children's privacy
Not for under 16
Snow is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child under 16 has provided us with personal data, contact us at privacy@encrypt-files.com and we will delete it.
Updates
Changes to this policy
We may update this privacy policy from time to time. When we make changes, we will update the effective date at the top of this page. For significant changes, we will notify registered users by email. Continued use of Snow after changes take effect constitutes acceptance of the updated policy.