What data does Pandafile keep, and for how long?

We try to collect as little as possible and delete it on a timetable. Here is what we hold and why.

What we store

• Your files, their names, sizes and types, plus any title and message you add, so we can deliver them.
• Your email address, if you confirm it with a code or sign in, so we can send your transfer and tell you when it is downloaded.
• Recipients' email addresses, when you send by email, so we can deliver the link and send a daily reminder until they download. Every reminder has a one-click link to stop them.
• Security data: one-way fingerprints of IP addresses, networks and device IDs, used to stop abuse and to apply the free 10 GB weekly limit fairly.
• File fingerprints of uploads, so files removed for being illegal cannot simply be uploaded again.
• For Plus and Pro: your subscription status and receipts from Stripe. We never see or store your full card number.

How long we keep it

• Sign-in codes and magic links: about a day after they expire.
• Files: 7 days on free, 14 on Plus, 30 on Pro, or sooner if you delete the transfer. Unfinished uploads: 2 days.
• Server logs with full IP addresses: 14 days.
• Sign-in sessions: up to 60 days.
• Transfer, recipient and download records, without the files: 90 days after the transfer expires, for abuse follow-up and the weekly limit.
• Your account email: until you ask us to delete your account.
• Payment and accounting records: as long as tax law requires, usually 6 years in the UK.

What we do not collect

We do not store passwords for your account, because sign-in is passwordless. We do not build advertising profiles of you ourselves. On free pages, our ad partner may use cookies, and personalised ads only appear if you consent.