Privacy

Analytics

The landing page at folslate.com uses PostHog to count visits and measure its own drop box. It runs fully cookieless: PostHog sets no cookie and writes nothing to localStorage or sessionStorage, so there is no consent banner. Unique visitors are counted server-side from a daily salted hash of your IP address and user agent, the same technique as the uploader fingerprints. See docs/spec.md §6.

PostHog records page views with the landing page's URL, and event names such as a file being selected or a link being copied. Analytics requests go through this domain, which forwards them to PostHog with your IP address attached so the visitor count stays real. It never sends a document id, the fol.ink URL of a hosted document, a document title, a file name, or file contents. Reading a hosted document on fol.ink sets no cookie and loads no analytics.

What we store

When you upload or report, we record a salted hash of your IP address — not the address itself — together with the document identifier, sizes, and timestamps. Referrer and user-agent are stored in coarse buckets, not as raw values. See docs/spec.md §6.

Every upload also issues a random ownership secret that authorizes updating the document until it expires. We store only a one-way hash of it — the secret itself is never stored, shown once in the upload response, and cannot be recovered. It is random and derives nothing from your IP address, browser, or identity; network signals never authorize document management. You can revoke it, which permanently disables document management for that link. Revocation does not remove the document; the link keeps resolving until the document expires.

Hosted document bytes expire after 24 hours; the link stops resolving at the same threshold, regardless of when storage is reclaimed. An authorized update restarts the 24-hour window. Individual view records are deleted after 90 days, and a per-document daily total is kept indefinitely. Database rows for uploads and abuse reports remain — only the salted IP fingerprints on uploads and reports are nulled after 30 days per docs/spec.md §6. Report reasons and coarse metadata remain on retained rows.

Fingerprints

Uploaders and reporters are stored as HMAC fingerprints keyed by a secret. Fingerprints are pseudonymous — they can still link activity while the secret is held. They are cleared by a nightly sweep that nulls fingerprints older than 30 days, as described in docs/spec.md §6. The rows themselves remain; only the identifier is removed.

Who sees your data

No one outside the operator, except PostHog (PostHog Cloud, US region), which processes the landing page's cookieless analytics events on the operator's behalf. There is no advertising, no data sale, and no other sharing with third parties. A document you upload is public at its link by design.

Contact

Questions about privacy or a request related to a hosted document can be sent through the reporting form at /abuse.