Privacy Policy

1. Who We Are

Doneload is operated from the Netherlands. This policy explains how we collect, use, and protect your data in compliance with the General Data Protection Regulation (GDPR).

2. What Data We Collect

Account data: When you sign up, we store your email address, name (optional), hashed password, and account creation date. If you sign in via Google, we receive your email, name, and profile picture from Google.

Usage data: We log which tools you use, when, and from which IP address. This is used for rate limiting and service improvement.

Payment data: If you subscribe to Pro, payment processing is handled by Mollie. We store your Mollie customer ID and subscription status. We never see or store your card details.

Analytics: We use Umami, self-hosted on our server in Germany, to count visits and tool runs: page, referring site, browser, country, screen size, language, and for each tool run the tool, the number and size of files, how long it took and whether it worked. Umami sets no cookies and stores no IP address. The first site or campaign link that brought you here is kept in your own browser (bw_ft) and sent along with the signup and checkout counts. You can switch analytics off in the cookie settings at any time.

Files: Files you upload are temporarily stored for processing only. They are automatically deleted within 2 hours. We do not read, analyze, or retain your file contents.

3. Legal Basis for Processing (GDPR Art. 6)

Contract performance: Processing your account and files is necessary to provide the service you requested.

Legitimate interest: Usage logging for rate limiting and security. Analytics for service improvement.

Consent: Marketing communications (if any) are only sent with your explicit consent.

4. How We Use Your Data

We use your data to: provide the file conversion service, manage your account and subscription, enforce rate limits, prevent abuse, improve the service, and communicate important updates about your account.

5. Data Sharing

We do not sell your data. We share data only with:

Mollie: Payment processor (Netherlands-based, GDPR compliant): for subscription billing.

Hetzner: Server hosting provider (Germany-based, GDPR compliant): where data is physically stored.

Resend: Email delivery service used only to send account confirmation and password reset messages to the address you gave us.

Google: Only if you choose to sign in with Google: we receive basic profile information from Google's OAuth service.

6. Data Storage and Security

Your data is stored on servers in Germany (Hetzner, Nuremberg). Passwords are hashed using industry-standard algorithms (scrypt/pbkdf2). All connections are encrypted via TLS/SSL. Uploaded files are automatically deleted within 2 hours of processing.

7. Your Rights (GDPR)

Under the GDPR, you have the right to:

Access: Request a copy of all data we hold about you.

Rectification: Correct inaccurate data via your account page.

Erasure: Delete your account and all associated data from your account page.

Data portability: Request your data in a machine-readable format.

Objection: Object to processing based on legitimate interest.

Restriction: Request we limit how we process your data.

To exercise any of these rights, email support@doneload.app. We will respond within 30 days.

8. Cookies

We set two strictly necessary cookies: session, which keeps you logged in and ties the jobs you run to your visit, and bw_consent, which remembers your cookie choice for 180 days. Umami analytics sets no cookies. There are no ads today; if ads start, they only load after you allow advertising in the cookie settings, and Pro subscribers and credit holders never see them. The full list, including browser storage, is on the cookie policy page.

9. Data Retention

Account data is kept for as long as your account exists. When you delete your account, all personal data is immediately removed. Usage logs are retained for 90 days for abuse prevention, then purged. Uploaded files are deleted within 2 hours.

10. Children's Privacy

Doneload is not intended for children under 16. We do not knowingly collect data from children under 16.

11. Changes to This Policy

We may update this policy. Material changes will be communicated via email to registered users. The "last updated" date at the top will reflect the most recent revision.

12. Contact

For privacy questions or to exercise your rights:

Email: support@doneload.app

If you're unsatisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.