Privacy Policy

How Bytevora handles your data, privacy rights, and account information.

Last updated:

Privacy Policy

Bytevora (“we”, “us”, or “our”) operates a free hosting service and related website (the “Service”). This Privacy Policy explains how we collect, use, and protect information when you use Bytevora.

1. Who We Are

Bytevora is operated by an individual based in the United Kingdom.

For the purposes of data protection law, Bytevora acts as the data controller for personal data collected through the Service.

Contact:

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Username
  • Password (stored securely using hashing and never stored in plain text)
  • IP address (for security and abuse prevention)

2.2 Hosted Content

As a hosting provider, Bytevora stores files and content uploaded by users in order to provide the Service.

This content is processed and stored only as necessary to operate the platform. Users are responsible for any personal data contained within content they upload or host using the Service.

2.3 Logs and Security Data

We collect technical and security-related data, including:

  • IP addresses
  • Access logs
  • Timestamps and actions

This data is used to:

  • Protect the Service
  • Prevent abuse, fraud, and malicious activity
  • Maintain reliability and performance

Security logs are typically retained for a limited period unless required for ongoing investigations or legal obligations.

3. Analytics

We use self-hosted Umami analytics to understand how the website is used.

Umami is configured to:

  • Not store real IP addresses
  • Collect only anonymous usage data such as page views, country-level location, and device information

Anonymous identifiers may be used to distinguish visits, but this data cannot be used to directly identify individual users.

4. Cookies and Advertising

4.1 Necessary Cookies

We use strictly necessary cookies required for core site functionality, such as authentication and security.

4.2 Advertising Cookies

We use Google AdSense to display advertisements. Google and its partners may use cookies or similar technologies to:

  • Serve ads
  • Measure ad performance
  • Personalize advertisements where permitted

Google may process personal data according to its own privacy policies.
You can learn more about how Google uses data from sites that use its services here:

https://policies.google.com/technologies/partner-sites

Users may manage advertising preferences through their Google account.

5. How We Use Information

We use information to:

  • Provide and operate the Service
  • Manage user accounts
  • Store and deliver hosted content
  • Send transactional and security-related emails
  • Monitor performance and prevent abuse

We do not sell personal data to third parties.

6. Legal Basis for Processing

Under UK data protection law, we rely on the following legal bases to process personal data:

  • Contractual necessity – to provide and operate the Service and manage user accounts
  • Legitimate interests – to maintain platform security, prevent abuse, and improve reliability
  • Legal obligations – where processing is required to comply with applicable laws
  • Consent – where required, such as for advertising cookies or optional services

7. Emails and Communications

We may send emails related to:

  • Account creation and management
  • Security notifications
  • Service updates and system messages

We do not send marketing emails or promotional newsletters without explicit consent.

8. Data Sharing

We share data only where necessary to operate the Service.

This includes service providers such as Cloudflare, which provides reverse proxy, security, caching, and performance services.

Cloudflare operates a global infrastructure network. As a result, limited technical data such as IP addresses may be processed through Cloudflare systems located outside the United Kingdom where required to deliver security and performance services.

All other systems, including analytics and hosting infrastructure, are self-hosted.

We do not share personal data with third parties for marketing purposes.

9. Data Storage and Location

Primary data storage and infrastructure are located in the United Kingdom.

However, certain service providers (such as Cloudflare) may process limited technical data through infrastructure located in other jurisdictions as required to provide their services.

10. Data Retention

We retain personal data only for as long as necessary to operate the Service and meet legal obligations.

Typical retention periods include:

  • Account information: retained while the account remains active
  • Security and access logs: generally retained for a limited period (for example 30–90 days) unless required longer for abuse investigations
  • Hosted content: retained until removed by the user or the associated account is deleted

Users may request deletion of their account and associated data, subject to technical and legal limitations.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

  • Encrypted connections (HTTPS)
  • Secure password hashing
  • Restricted system access

However, no method of transmission over the internet or electronic storage is completely secure.

12. Children’s Privacy

Bytevora is intended for users aged 13 and older.

We do not knowingly collect personal data from children under 13.

If we become aware that personal data from a child under 13 has been collected, we will take steps to delete that information.

13. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to certain processing
  • Request a copy of your data in a portable format
  • Withdraw consent where processing is based on consent

You may exercise these rights by contacting [email protected].

14. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page and the effective date will be updated accordingly.

Where changes are significant, we may notify users through the website or by email.