01Who we are
GetSwift (“GetSwift”, “we”, “us”, “our”) is a free file-hosting, link-in-bio and email-alias platform operated at getswift.cloud. For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, GetSwift is the data controller for the personal data described in this policy.
Questions, requests, or complaints about privacy can be sent to [email protected]. We aim to respond within 30 days, as required by GDPR Article 12.
02What data we collect
We only collect what we need to run the service. That falls into a few buckets:
Account data
- Your email address and username.
- A securely hashed password, or, if you sign in with a third-party provider, the identifier that provider returns. We never store your plaintext password.
- API keys and bot tokens you generate for programmatic access.
Content you create or upload
- Files you upload and their metadata (filename, size, type, upload time, visibility, tags, folders, colour labels).
- Collections and link-in-bio (“bio”) pages, including your display name, avatar, description, links, and any widgets or themes you configure.
- Email you send and receive through GetSwift email aliases, including message contents, headers, and attachments.
Usage & technical data
- Aggregate view counts and analytics for your files and bio pages: number of views, referring sites, and approximate country (derived from IP, not stored as a precise location).
- IP address and request metadata, processed transiently by our edge provider for security, rate-limiting, and abuse prevention.
- An essential session cookie to keep you signed in, plus browser local-storage for interface preferences (e.g. theme, UI options). No third-party advertising or tracking cookies are used.
Optional integrations you enable
If you connect a bio integration — such as Discord presence (via Lanyard), Last.fm, or GitHub — your browser fetches that data directly from the relevant provider when your page is viewed. Enabling an integration means you consent to that data being displayed on your public page. You can remove any integration at any time from the bio editor.
03How and why we use your data
Under GDPR we must have a lawful basis for every use of personal data. Ours are:
- Performance of a contract (Art. 6(1)(b)) — to create and secure your account, store and serve the files, pages, and emails you ask us to, and provide the core features of the service.
- Legitimate interests (Art. 6(1)(f)) — to keep the platform secure, prevent abuse, spam and fraud, understand aggregate usage, and maintain and improve the service. We balance these against your rights and only process what is necessary.
- Consent (Art. 6(1)(a)) — for optional integrations you enable and for any data you choose to make public. You can withdraw consent at any time.
- Legal obligation (Art. 6(1)(c)) — where we must retain or disclose data to comply with the law or respond to lawful requests.
We do not sell your personal data, and we do not use it for advertising or profiling.
04Who we share data with
We don't share your personal data with anyone except the sub-processors that make the service work. Each is bound by a data-processing agreement:
- Cloudflare, Inc. — our entire infrastructure runs on Cloudflare (Pages, Workers, D1 database, R2 storage, and CDN). It hosts your account data, files, and pages, and processes request metadata for delivery and security. See Cloudflare's privacy policy.
- Resend — used to deliver outbound email you send through GetSwift. Message content and recipient addresses pass through Resend for the sole purpose of delivery. See Resend's privacy policy.
We may also disclose data if required by law, to enforce our Terms of Service, or to protect the rights, safety, and security of our users or the public.
05International transfers
GetSwift runs on a global edge network, so your data may be processed on servers outside your country, including outside the European Economic Area. Where that happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses, as implemented by our sub-processors.
06How long we keep it
- Account data, files, bio pages, and email are retained for as long as your account is active.
- When you delete a file, collection, or email, it is removed from the live service. When you delete your account, your personal data and content are deleted from the live service.
- Residual copies may persist in encrypted backups for a limited period before being overwritten, and we may retain minimal records where a legal obligation requires it.
- Aggregate, anonymised statistics that cannot identify you may be kept indefinitely.
07Your rights
If you are in the EU, EEA, or UK, GDPR gives you the following rights over your data:
- Access — get a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — have your data deleted (“right to be forgotten”). You can delete your account yourself from settings.
- Restriction — limit how we process your data in certain cases.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on our legitimate interests.
- Withdraw consent — at any time, where processing is based on consent.
To exercise any of these, email [email protected]. Exercising your rights is free, and we won't penalise you for it. You also have the right to lodge a complaint with your local data protection authority (in the EU, this is the supervisory authority in your country of residence).
08Security
We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS everywhere), hashed passwords, scoped access tokens, and infrastructure run on a hardened edge platform. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authority of any breach affecting your rights as required by GDPR Articles 33–34.
09Children's privacy
GetSwift is not directed to children. You must be at least 16 years old to use the service (or the minimum digital-consent age in your country, whichever is higher). We do not knowingly collect data from children under that age; if you believe a child has provided us data, contact [email protected] and we will delete it.
10Changes to this policy
We may update this policy as the service evolves. When we do, we'll revise the “last updated” date at the top, and for significant changes we'll take reasonable steps to notify you. Continued use of GetSwift after an update means you accept the revised policy.
11Contact us
For any privacy question or to exercise your rights, email [email protected]. For legal notices and copyright matters, see our Terms of Service or contact [email protected].