Privacy

Last updated: April 2026 — template for legal review

Shotdrive (“we”) provides file transfer tooling. This page describes how we handle data when you use drive.shotnode.io (the “Service”). Replace placeholders below with your final legal entity and DPO contact before relying on this text in production.

Controller

Identify the data controller (legal name, address). For EU users, name your representative if the controller is outside the EU.

What we process

  • Account (optional): If you sign in, we process identifiers from our identity provider (e.g. Auth0) such as email and subject id, to list and manage your transfers.
  • Files and metadata: Filenames, sizes, MIME types, expiry, and storage locations are stored so the Service can deliver downloads. Payloads may be end-to-end encrypted: when E2EE is used, we do not have access to the decryption key (it is conveyed in the link fragment #key=…, which is not sent to our servers).
  • Technical data: IP address, User-Agent, and similar data may appear in logs and rate limiting for security and abuse prevention. Correlation ids help support investigations.

Sub-processors

The Service is hosted on Cloudflare (Workers, R2 object storage, D1 database, Queues, DNS, and related edge services). Data may be processed in Cloudflare’s global network. List additional vendors (e.g. Auth0, error tracking) in your annex.

Retention

Transfers expire according to settings you or defaults apply. After expiry or deletion, we remove or deactivate database rows and delete objects from object storage as described in operations runbooks. Adjust to your actual backup and log retention windows.

Your rights (GDPR)

Depending on jurisdiction, you may have rights to access, rectification, erasure, restriction, portability, and objection. Describe how users can contact you and how you honour export/erase requests (see also the technical GDPR roadmap for automated endpoints).

This document is a technical placeholder for product and engineering alignment — obtain qualified legal review before publication.