Privacy Policy
Last updated 2026-09.
DriveRock ("the service") is a file upload and sharing tool. This page explains what information the service collects, why, and what happens to it.
Account information
To sign in, the service needs a way to identify you. Depending on which sign-in method you use, this is:
- Your email address (magic link or one-time code sign-in), or
- Your email address and name, as provided by Google (Google sign-in) — the service only ever reads your verified email and name, never your Google password or other Google account data.
No password is ever collected or stored by this service for any sign-in method.
Session data
Once signed in, a single session cookie identifies your browser to the service. It contains no personal information itself — it is a random identifier the service looks up in its own database. You can end a session at any time from the "Sign out" option in the app.
Files you upload
Files you upload are stored so they can be retrieved by you or by anyone you share a link with. The service does not inspect, scan, or use the content of your files for any purpose other than storing and serving them back on request. A file remains until you delete it or an administrator removes it (for example, in response to abuse).
Share links
A share link is a bearer credential. Anyone who has the link can access whatever it points to, without needing an account. Treat share links the same way you would treat a password: only send them to people you intend to have access, and be aware that forwarding a link forwards access.
Technical and usage data
To operate the service, keep it reliable, and detect abuse, the service records:
- IP address, approximate location (country/city, derived from network routing — not GPS or device location), and browser user-agent string, for uploads, downloads, and sign-in attempts;
- Timestamps and outcomes of these actions (for example, whether an upload succeeded, or a download link was expired when someone tried to use it).
This data is used for operating and securing the service — for example, noticing repeated failed attempts against a link — and is visible only to the service's administrator(s), never sold, and never shared with advertisers.
Who else sees your data
The service runs on Cloudflare's infrastructure (hosting, storage, and database). Sign-in emails and codes are delivered through an email-sending service acting only as a mail carrier — it is told the recipient address and the message content, nothing else about your account. Neither receives your uploaded files' content.
Cookies
The service sets exactly one cookie: the session cookie described above. There are no third-party cookies, no advertising trackers, and no cross-site tracking of any kind.
Your choices
You can sign out at any time, and you can delete your own uploaded files from your account. To request access to, or deletion of, any other data the service holds about you, contact the address below.
Changes to this policy
If this policy changes in a way that matters, the "Last updated" date at the top of this page will change accordingly.
Contact
Questions about this policy or your data: dev@driverock.io