Privacy Policy

How we protect your data and respect your privacy.

Last updated: February 27, 2026

Data We Collect

We collect only essential data to provide secure file sharing:

Files and Content

• Uploaded files (temporarily stored with secure access)
• File metadata (name, size, type)
• Passwords and security settings you configure
• Download limits and expiry times

Usage Analytics

• Anonymized IP addresses for security and rate limiting
• Download timestamps and access patterns
• Browser type and basic device information
• Email addresses (only when you provide them for verification)

Google Analytics

We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC, to understand how visitors interact with our website. Google Analytics collects:

• Pages viewed and time spent on each page
• Referral sources (how you found our site)
• General geographic location (country/city level)
• Device type, browser, and operating system
• Session duration and interaction events

Google Analytics uses cookies and similar technologies to collect this data. IP addresses are anonymized by default in GA4. Data collected by Google Analytics is processed by Google in accordance with Google's Privacy Policy.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to analyze website traffic and improve your experience.

Cookies We Use

• Essential cookies: Required for core functionality such as authentication, security (Cloudflare Turnstile), and session management
• Analytics cookies: Set by Google Analytics (GA4) to collect anonymized usage data (e.g., _ga, _ga_*). These cookies expire after up to 2 years

Opting Out of Analytics

• Install the Google Analytics Opt-out Browser Add-on
• Adjust cookie settings in your browser to block third-party cookies
• Use browser privacy/incognito mode to prevent persistent tracking

Opting out of analytics cookies will not affect the functionality of the service.

How We Protect Your Data

We implement industry-standard security measures to protect your files:

Encryption & Security

• SSL/TLS encryption for all transfers
• Password protection with secure hashing
• Server-side encryption at rest
• Secure random URL generation

Access Controls

• Download limits and expiry controls
• Email verification (optional)
• Rate limiting and abuse prevention
• No permanent storage of personal data

Data Retention & Deletion

Files are automatically deleted to protect your privacy:

Automatic Deletion

• When download limit is reached
• When expiry time passes (max 24 hours for free users)
• Manual deletion by uploader
• System cleanup for orphaned or expired files

Important: Once deleted, files cannot be recovered. We don't maintain backups of user files for privacy and security reasons.

Your Rights & Control

Note: These controls represent how you can manage your own files and data through the Comfyfile interface. If you have formal data subject requests under GDPR or other applicable law, please contact us at [email protected]. We handle such requests on a case-by-case basis. Response times are not guaranteed.

You maintain full control over your data:

Your Rights

• Delete files at any time
• Control access with passwords
• Set custom expiry times
• Monitor download analytics

Data Requests

• Request information about your data
• Report privacy concerns
• Request immediate deletion
• Contact us with questions

Third-Party Data Sharing

We do not sell, rent, or share your data for commercial purposes.

Limited data sharing may occur only in these circumstances:

• Legal compliance with law enforcement or court orders
• Security purposes to prevent abuse or illegal activities
• Technical service providers (under strict confidentiality agreements)
• Emergency situations to protect user safety

Third-Party Service Providers

We use the following third-party services that may process limited data on our behalf:

• Google Analytics (Google LLC) — anonymized website usage analytics. Google Privacy Policy
• Cloudflare (Turnstile) — bot protection and security verification
• (Object Storage) — EU-based file storage infrastructure
• Stripe — payment processing for paid plans

Related Policies

For content guidelines and sharing responsibilities, review our content policy.

View Content Policy

Regulatory Disclosure

Comfyfile is hosted in EU data centers and designed with data-protection principles in mind. The service has not been independently audited or certified under GDPR, HIPAA, ISO 27001, or any other regulatory or compliance framework.

Mentions of privacy principles, data minimization, or encryption practices on this site describe our design approach — they do not constitute a legal compliance certification. If your use of this service is subject to specific regulatory requirements, you are responsible for evaluating whether the service is appropriate for your needs and for consulting a qualified legal professional.

For EU users: The data controller for files you upload is you. Comfyfile acts as a data processor in so far as it stores and transmits your data on your behalf. Files are hosted in EU-based object storage under private access controls.

For Good Discount Verification

When you apply for the For Good discount, we collect and process the following information solely to verify your eligibility:

• Your name and work email address
• Your organization name and website or registration link
• The category that best describes your organization
• Any additional information you provide in your application

We use this information only to assess whether your organization qualifies for the discount. We do not sell, rent, or share your application data with third parties for commercial purposes. After verification, we retain only the minimum information needed to confirm your ongoing eligibility.

Note: Verification data is processed in accordance with this Privacy Policy. If your discount application is denied, we delete the application data within 30 days unless retention is required for legal compliance.

Privacy Questions?

Privacy: [email protected]

Support: Contact Form