Privacy Policy

1. Data collected

candyfile.io can be used without registration. If you choose to create an account, we collect:

• – Email address
• – Name (only if signing in via Google)
• – Encrypted password (only for email/password registration)

Some technical data may also be collected automatically, including:

• – IP address
• – Browser type
• – Device information
• – Browsing data

This data is used exclusively for the proper functioning of the service and for security purposes.

2. User-uploaded files

Files uploaded by users:

• – are used exclusively to provide the requested service (e.g. compression, conversion)
• – are not permanently stored
• – are automatically deleted within a short period of time

3. User accounts and authentication

Authentication is handled via Supabase, a third-party service that stores account data securely on encrypted servers. Passwords are never stored in plain text.

If you sign in with Google, we receive only your email and public name via OAuth 2.0. We do not access your Google account in any other way.

Session data is stored in browser cookies solely to keep you logged in. You can delete your account at any time by contacting us at support@candyfile.io.

4. Cookies

The site uses only technical cookies necessary for the service to function.

No profiling or tracking cookies are used (unless future integrations are added).

5. Security

We adopt technical measures to protect data and files uploaded by users against unauthorized access.

6. Third-party services

The site may use hosting and infrastructure services (e.g. Vercel) for technical operation.

These services may process technical data according to their own policies. This includes Supabase (authentication and account data) and Vercel (hosting).

7. Contact

For any privacy-related requests, please contact:

8. Changes

This Privacy Policy may be updated at any time. Changes will be published on this page.