Legal
Privacy Policy
1. What We Collect
When you use Syxlor Upload, we process the following information:
- The file you upload (stored temporarily for up to 24 hours)
- Your IP address (logged securely for abuse prevention and rate limiting)
- Basic request metadata (browser type, timestamp)
- A short-lived session token stored in a cookie to validate your upload request
2. How We Use Your Data
- To deliver the secure file transfer service
- To enforce upload limits, malware scanning, and prevent abuse
- To automatically securely delete files after expiry
We do not sell, share, or use your data for advertising or analytics. All logs are securely rotated and kept only for diagnostic and security purposes.
3. File Storage & Expiry
Uploaded files are stored outside the public static web directory. Links expire after the configured retention period (24 hours by default); expired files are removed by the scheduled cleanup job. Cleanup runs hourly, so deletion may occur after the expiry timestamp. We do not promise backup retention for uploaded files.
4. Cookies & Sessions
We use a strict single-session token mechanism to validate that your upload request originates from a legitimate page session. This prevents cross-site request forgery (CSRF). No tracking or advertising cookies are used.
5. Data Sharing & Processing
We do not share file contents with third parties except where required by law. Uploaded files are stored as data and are not executed by the service. A configured ClamAV scanner checks files before they are published; uploads are rejected when required scanning is unavailable or fails.
6. Security
Downloads links are public once generated — anyone with the link can download the file until it expires. Do not share files containing sensitive information unless you control who receives the link. Syxlor implements state-of-the-art protections against malicious uploads, but you are responsible for the confidentiality of the links you generate.
7. Your Rights
Because we do not require accounts or store personal profiles, most data rights (access, deletion) are fulfilled automatically by the 24-hour expiry. To request early deletion of a file or for any privacy concern, contact us at contact@tasfiqahmed.com.
8. Changes to This Policy
We may update this policy from time to time. The "Last updated" date above will reflect any changes. Continued use of the service constitutes acceptance.
9. Contact
Tasfiq Ahmed — contact@tasfiqahmed.com