Privacy Policy

At MediaUploads, we believe privacy is a fundamental right. Our architecture is designed from the ground up to ensure that you-and only you-have access to your data. This Privacy Policy outlines how our zero-knowledge system protects your information.

1. Zero-Knowledge Architecture

MediaUploads operates on a "Zero-Knowledge" principle. This means:

• We cannot see your passwords: Your password is hashed and salted locally on your device before it is ever transmitted. We store only a cryptographic verifier, meaning we never possess your actual password.
• We cannot read your files: All files are encrypted with AES-256 encryption. If you use our client-side encryption features, the decryption keys are derived from your password, which we do not have.

2. Information We Collect

To provide our services, we collect and process the minimum amount of data necessary:

Account Data

We store your chosen username and the cryptographic verifier required to authenticate you. We do not store your email address unless you voluntarily provide it for notifications.

Encrypted File Data

When you upload files, we store the encrypted binary data. We also store filesystem metadata (filenames, folder structure, file sizes, and timestamps) to allow you to organize your content. This metadata is accessible to the server to provide search and listing capabilities.

Network Interactions

For security and rate-limiting purposes, we temporarily log IP addresses associated with API requests. These logs are rotated regularly.

3. The Decentralized Storage Network

MediaUploads utilizes a distributed network of Storage Nodes to ensure data resilience and availability.

• Data Distribution: Your encrypted files may be stored across multiple independent nodes in the network.
• Node Privacy: Storage Node operators facilitate the storage of encrypted data blobs but do not have the keys to decrypt or view your files. To them, your data appears as random noise.

4. Permissions & Desktop App

The MediaUploads Desktop and Web applications may request the following permissions:

• Files & Storage: To upload backups and download your requested files.
• Network Access: To communicate with the storage network.
• Screen Recording (Optional): Required only if you use the built-in screen recorder feature. This data is processed locally and uploaded only upon your command.

5. Data Retention & Deletion

You have full control over your data. deleting a file moves it to the trash, and permanently deleting it removes the encryption keys and database references, rendering the data unrecoverable across the entire network.

6. Changes to This Policy

We may update this policy as our technology evolves. Significant changes will be communicated through the application dashboard.

7. Contact Us

If you have questions about our encryption standards or this policy, please contact the administrator.