Privacy Policy

Last Updated: November 15, 2025

1. Introduction

tfLink ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our temporary file sharing service.

Our core principle: We collect the minimum data necessary to provide our service.

2. Information We Collect

2.1 For Anonymous Uploads

When you upload files anonymously, we collect:

2.2 For Authenticated Uploads (API Users)

If you use our API with authentication:

• User ID: Self-provided identifier (not verified)
• Authentication token: Stored in Cloudflare KV for verification
• Uploaded files: Stored under user-specific path, NOT automatically deleted

Note: We do not verify user identities or collect personal information. The User ID is any string you choose.

3. What We DO NOT Collect

• ❌ Personal information (name, email, address, phone number)
• ❌ IP addresses
• ❌ Browser fingerprints
• ❌ Cookies for tracking purposes
• ❌ Usage analytics or behavioral data
• ❌ Location data
• ❌ Device identifiers

4. Cookies and Tracking

We do not use cookies for any purpose.

We do not use:

• Google Analytics or similar analytics services
• Tracking pixels
• Session cookies
• Persistent cookies
• Third-party tracking scripts

Advertising Cookies

While tfLink itself does not use cookies, our advertising partners may use cookies to display relevant ads. These cookies are governed by the privacy policies of our advertising partners, not tfLink.

5. How We Use Your Information

We use collected data solely to:

• Store and serve your uploaded files
• Generate download links and QR codes
• Automatically delete anonymous files after 7 days
• Verify authentication tokens for API users
• Prevent abuse and maintain service integrity

We never:

• Sell your data to third parties
• Use your data for profiling or targeted advertising
• Share your files with anyone except those you share the link with
• Analyze file contents

6. Data Storage and Security

Infrastructure

tfLink operates on Cloudflare's infrastructure:

• Cloudflare Workers: Application runtime
• Cloudflare R2: File storage (object storage service)
• Cloudflare KV: Authentication token storage (key-value store)
• Cloudflare CDN: Global content delivery network

Security Measures

• Files are served over HTTPS (TLS encryption)
• Unique, unguessable file keys (UUIDs)
• No file indexing or listing (files only accessible via direct link)
• Infrastructure security managed by Cloudflare

7. Automatic Data Deletion

Anonymous uploads are automatically and permanently deleted after 7 days:

• Files are removed from Cloudflare R2 storage
• File metadata is deleted
• Download links become invalid
• Deletion is automatic and cannot be reversed

Authenticated uploads are NOT automatically deleted. API users are responsible for managing their own files.

8. Third-Party Services

Cloudflare

Our entire infrastructure runs on Cloudflare. Cloudflare may collect connection data according to their privacy policy:

Cloudflare Privacy Policy

Advertising Partners

We may display advertisements from third-party networks. These networks may:

• Set cookies or use similar technologies
• Collect data for ad personalization
• Have their own privacy policies

We recommend reviewing privacy policies of advertising networks that serve ads on tfLink.

9. Your Rights (GDPR & CCPA)

European Users (GDPR)

If you're in the EU/EEA, you have the right to:

• Access: Request information about data we hold
• Deletion: Request deletion of your data (for authenticated users)
• Portability: Request a copy of your data
• Object: Object to processing of your data

For anonymous uploads: Data is automatically deleted after 7 days, so no action is necessary.

California Users (CCPA)

California residents have the right to:

• Know what personal information is collected
• Request deletion of personal information
• Opt-out of sale of personal information (we do not sell data)

Exercising Your Rights

To exercise any of these rights, contact us at:

tflink@tmpfile.link

10. Children's Privacy

tfLink is not directed at children under 13. We do not knowingly collect information from children. If you believe a child has uploaded content, please contact us immediately.

11. International Data Transfers

Your files may be stored on Cloudflare servers located in various countries. Cloudflare operates a global network with data centers worldwide. Data transfer is necessary to provide our service with global CDN acceleration.

12. Data Breach Notification

In the unlikely event of a data breach affecting user data, we will:

• Investigate the breach promptly
• Notify affected users (for authenticated users with contact information)
• Post a public notice on our website
• Comply with applicable data breach notification laws

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting. We will update the "Last Updated" date at the top of this page.

Continued use of tfLink after changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices:

• Email: tflink@tmpfile.link
• GitHub: tflink-tmpfile/tflink

15. Summary