[PRIVACY POLICY]
Short version: your files and passwords never leave your device.
This policy explains what personal data CryptFile.Online (the "site") processes, why, and what you can do about it. The site is a personal project run by Vladimir Lorentz, Lyon, France, who is the data controller. Contact: vladimir.lorentz@gmail.com.
Last updated: 12 October 2026.
[YOUR FILES, TEXT AND PASSWORDS]
All encryption and decryption runs in your browser. The files you select, the text you type, and your passwords and keys are processed in your device's memory and are never transmitted to this site or to anyone else. They are not stored, logged or analysed. When you close the tab, they are gone.
Analytics events record only that an action happened (for example "file encrypted") and non-identifying details such as the algorithm chosen — never file names, contents, passwords or keys.
[ANALYTICS — GOOGLE ANALYTICS]
The site uses Google Analytics 4 to understand how many people visit and which pages are useful. It collects data such as pages viewed, approximate location (country/city), device and browser type, and the referring site, using cookies. Google Analytics 4 does not log or store IP addresses.
Legal basis: your consent where required (EEA, UK, Switzerland), otherwise legitimate interest in measuring the site's audience. Data is kept according to the property's Google Analytics retention setting (at most 14 months).
[ADVERTISING — GOOGLE ADSENSE]
The site is funded by advertising served by Google AdSense. Google and its partners use cookies to show ads, to limit how often you see the same ad, to measure performance and to detect fraud. With your consent, ads may be personalised based on your earlier visits to this and other websites.
Visitors in the EEA, UK and Switzerland are asked for consent through a consent message managed by Google, a certified consent management platform. Until you answer, advertising and analytics cookies are not set. You can change your choice at any time through the "Privacy and cookie settings" link that the message adds to the page.
You can also opt out of personalised advertising at Google Ad Settings, and read how Google uses data from sites that use its services.
[OTHER TECHNICAL DATA]
- Hosting. The site is served by Cloudflare. Like any web server, it receives your IP address and browser details in order to deliver the pages; Cloudflare may process these in technical logs for security and operation.
- Fonts. Fonts are loaded from Bunny Fonts (fonts.bunny.net), a privacy-focused service that states it does not log or track visitors.
- Browser storage. The site stores one session-only flag so the support message is not shown twice in a visit. It is deleted when you close the browser.
- Email. If you write to me, I keep your message and address only as long as needed to reply and follow up.
[INTERNATIONAL TRANSFERS]
Google and Cloudflare may process data outside the European Union, including in the United States. Both participate in the EU-US Data Privacy Framework and use the European Commission's standard contractual clauses.
[YOUR RIGHTS]
Under the GDPR you can request access to, correction or deletion of your personal data, object to or restrict its processing, ask for portability, and withdraw consent at any time. Write to vladimir.lorentz@gmail.com.
Note that the site holds no account or profile about you: analytics and advertising data are held by Google, and the most effective way to manage them is through your consent choice and your Google settings. You also have the right to lodge a complaint with the French data protection authority, the CNIL.
[CHILDREN]
The site is not directed at children under 16 and does not knowingly collect their personal data.
[CHANGES]
If this policy changes, the new version will be published on this page with an updated date.