Privacy Policy

Files you open

When you open a ZIP archive from your own device — by dragging it in, choosing it from the file picker, or pasting it — that file is read entirely inside your web browser. It is never uploaded to us. We do not receive it, store it, log it, scan it, or transmit it anywhere. We have no technical ability to access it.

Extracted file contents exist only in your browser's memory while you are viewing them, and are discarded when you close the archive or leave the page.

Opening an archive from a URL

If you paste a public URL, the viewer first tries to download it directly from your browser. When that succeeds, the file travels straight from the host to you and never touches our infrastructure.

Some hosts refuse cross-origin browser requests. In that case, and only in that case, the download is retried through a relay endpoint we operate. That endpoint streams the bytes from the host through to your browser without writing them to disk or to any storage. We do not retain the file, its contents, or a copy of any part of it. The URL you submitted is processed in memory to perform the request and is not stored in an application database.

This applies only to public URLs that you type or paste yourself. Files chosen from your own device never pass through it.

What we store in your browser

We use your browser's local storage for one thing: remembering whether you chose the dark or light theme. If you allow the site to work offline, your browser also caches the page files themselves so it can load without a connection.

A single cookie may record your chosen language so you are not redirected again on a later visit. It contains a language code and nothing else.

None of this is transmitted to us, and none of it identifies you.

Analytics and tracking

We do not use advertising trackers, third-party analytics scripts, social media pixels, or cross-site profiling of any kind. We do not sell or share data about you, because we do not collect data about you.

Our hosting provider produces standard aggregate server logs — request counts, response codes, approximate region — as part of operating any website. These are not used to build a profile of you and are not linked to any file you open.

Third parties

The site is served by Cloudflare Pages, which acts as our hosting and content delivery provider and processes network-level request data as part of serving the site.

We load no third-party fonts, analytics, embeds or tag managers. Everything the page needs is served from our own domain.

There is one optional exception. If you choose “Open from Google Drive”, Google’s sign-in and file-picker scripts are loaded from Google at that moment, and Google will see that request and your sign-in. We ask only for access to the single file you pick — not your Drive — and the archive is read directly in your browser. Nothing is loaded from Google, and no Google request is made, unless you click that button.

Your rights

Because we do not collect personal data, there is normally nothing for us to disclose, correct or erase in response to a data subject request. If you believe we hold something about you, contact us and we will look into it and respond.

If you are in the EU, UK or another region with comparable data protection law, the lawful basis for the limited processing described here is our legitimate interest in operating and securing the website.

Changes and contact

If this policy changes in a way that affects how your data is handled, we will update the date at the top of this page. Material changes will be described rather than quietly substituted.

Questions about this policy can be sent to the address on our contact page.