Privacy Policy

1. Introduction

This Privacy Policy explains how HatFile, hereinafter referred to as “HatFile”, “we”, “our”, or “us”, collects, uses, stores, shares, and protects personal information when users access or use our website and services.

By using HatFile, you acknowledge that your personal information may be processed in accordance with this Privacy Policy.

2. Information We Collect

The types of information we collect depend on how you use the Service.

2.1 Account Information

• username;
• email address;
• password stored in hashed form;
• account creation date;
• account status and user preferences;
• Premium account status and subscription information.

2.2 Technical Information

• IP address;
• browser type and version;
• operating system;
• device type and device information;
• language and time zone settings;
• referring website or URL;
• date and time of requests;
• server, security, and diagnostic logs.

2.3 Usage Information

• uploaded file information;
• file names, sizes, types, and upload dates;
• download activity and transfer usage;
• storage usage;
• login history;
• account activity;
• error reports and security events;
• actions performed within the Service.

2.4 Payment Information

When a user purchases a Premium account, payment information may be processed by an external payment provider.

HatFile may receive transaction information such as the payment status, transaction identifier, amount, currency, selected plan, and payment date. Full payment card details may be processed directly by the payment provider and may not be stored by HatFile.

3. Uploaded Files

HatFile stores files uploaded by users for the purpose of providing file hosting, storage, sharing, and downloading functionality.

HatFile does not claim ownership of user-uploaded files. Ownership and responsibility for uploaded files remain with the user or the relevant rights holder.

Uploaded files may be processed automatically for technical purposes, including storage, transmission, file identification, security verification, abuse prevention, and service operation.

Users should not upload confidential, sensitive, or personal information unless they are authorised to do so and understand the risks associated with online file storage and sharing.

4. How We Use Information

We may use collected information to:

• provide, maintain, and operate the Service;
• create and manage user accounts;
• authenticate users and secure account access;
• store and deliver uploaded files;
• calculate storage and download usage;
• process Premium account purchases;
• provide customer and technical support;
• detect fraud, abuse, malware, and security threats;
• prevent unauthorised access and account sharing;
• investigate violations of our Terms of Service;
• comply with legal obligations and valid legal requests;
• improve the performance, reliability, and usability of the Service;
• communicate important account or service-related information.

5. Legal Bases for Processing

Where data protection law requires a legal basis, HatFile may process personal information on one or more of the following grounds:

• Performance of a contract — where processing is necessary to provide the Service requested by the user;
• Legitimate interests — including service security, fraud prevention, infrastructure protection, service improvement, and the enforcement of our Terms;
• Legal obligation — where processing is required to comply with applicable law, court orders, or lawful requests from authorities;
• Consent — where the user has voluntarily provided consent and consent is required by law.

6. Cookies and Similar Technologies

HatFile may use cookies and similar technologies to operate and improve the Service.

Cookies may be used to:

• keep users logged in;
• maintain user sessions;
• remember language, display, and account preferences;
• protect forms and accounts against abuse;
• detect suspicious or fraudulent activity;
• measure website performance and usage;
• support payment, security, or analytics services.

Users may control cookies through their browser settings. Disabling essential cookies may prevent login, account access, downloads, or other Service features from functioning correctly.

7. Sharing of Information

HatFile does not sell personal information.

Personal information may be shared only where reasonably necessary with:

• hosting, server, storage, and infrastructure providers;
• content delivery and network service providers;
• payment processors and payment service providers;
• email, customer support, and communication providers;
• security, anti-fraud, and abuse prevention providers;
• analytics or technical monitoring providers;
• professional advisers, including legal and accounting advisers;
• courts, law enforcement, regulators, or government authorities where legally required.

Service providers may process personal information only to the extent necessary to provide their services or comply with applicable law.

8. Legal Requests and Disclosure

HatFile may preserve or disclose information where reasonably necessary to:

• comply with applicable law or a valid legal request;
• respond to a court order, subpoena, or government request;
• investigate fraud, abuse, or unlawful activity;
• protect the rights, security, and property of HatFile or its users;
• prevent serious harm, security incidents, or criminal activity;
• enforce our Terms of Service and other policies.

Where legally permitted, HatFile may review the validity and scope of a request before disclosing information.

9. International Data Transfers

HatFile may use servers, infrastructure, or service providers located in different countries.

As a result, personal information may be transferred to and processed in a country other than the user’s country of residence.

Where required by applicable data protection law, HatFile will use appropriate safeguards for international data transfers.

10. Data Retention

HatFile retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

• the duration of the user’s account;
• the type of information;
• the duration of a Premium subscription;
• security and fraud prevention requirements;
• legal, tax, accounting, or regulatory obligations;
• the need to resolve disputes or enforce agreements.

Uploaded files may be automatically deleted when their applicable storage period expires, which may range from 7 to 365 days depending on the account type or plan.

Certain logs, transaction records, abuse reports, or legal records may be kept for a longer period where necessary for security, compliance, or dispute resolution.

11. Data Security

HatFile uses reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, destruction, loss, or misuse.

Such measures may include:

• encrypted HTTPS/TLS connections;
• secure password hashing;
• firewalls and access controls;
• server and application monitoring;
• security logging;
• software and infrastructure updates;
• fraud and abuse detection systems;
• restricted administrative access.

12. User Rights

Depending on the user’s location and applicable law, users may have the right to:

• request access to their personal information;
• request correction of inaccurate or incomplete information;
• request deletion of personal information;
• request restriction of processing;
• object to certain processing activities;
• request data portability;
• withdraw consent where processing is based on consent;
• submit a complaint to the relevant data protection authority.

These rights may be subject to legal limitations. HatFile may retain certain information where required by law, for fraud prevention, security, dispute resolution, or the establishment, exercise, or defence of legal claims.

HatFile may request reasonable information to verify the identity of the person submitting a privacy request.

13. Account Deletion

Users may request deletion of their account and associated personal information through the contact page.

Account deletion may result in the permanent deletion of uploaded files, account settings, and access to Premium features.

Some information may remain in backups, security records, payment records, or legal archives for a limited period where retention is required or permitted by law.

14. Children’s Privacy

HatFile is not intended for children who are below the minimum age required to use online services under applicable law.

HatFile does not knowingly collect personal information from children without the required consent or legal basis.

If we become aware that personal information has been collected from a child in violation of applicable law, we may remove the information and terminate the related account.

15. Third-Party Links and Services

The Service may contain links to third-party websites, payment providers, or other external services.

HatFile is not responsible for the privacy practices, security, content, or policies of third-party services.

Users should review the privacy policies of any third-party service they use.

16. Account Security

Users are responsible for maintaining the confidentiality and security of their account credentials.

Users should immediately notify HatFile if they suspect unauthorised access, account theft, password compromise, or other suspicious activity.

HatFile is not responsible for losses resulting from a user’s failure to protect their login credentials, except where liability cannot legally be excluded.

17. Changes to This Privacy Policy

HatFile may update this Privacy Policy from time to time to reflect changes to the Service, legal requirements, security practices, or business operations.

The updated Privacy Policy becomes effective when published unless a different effective date is stated.

Users are encouraged to review this Privacy Policy periodically.

18. Contact and Privacy Requests

Questions regarding this Privacy Policy, account data, or privacy rights should be submitted through the HatFile contact page.

When submitting a privacy request, users should provide enough information to identify the relevant account and clearly describe the requested action.

19. Data Protection Principles

HatFile aims to process personal information lawfully, fairly, transparently, and only for specified purposes.

We aim to collect only the information reasonably necessary to operate the Service, protect our infrastructure, comply with legal obligations, and provide users with file storage and sharing functionality.