Privacy Policy

Last updated: 2026-03-16

1. Introduction

Filarr is published by Mathis Belouar-Pruvot (hereinafter "we"). This privacy policy describes the data we collect and how we use it.

Filarr is a local-first desktop application. All your data (files, notes, profiles) stays on your device, encrypted with AES-256-GCM. No server is involved in the app’s operation. We technically have no access to the content of your files, their names, or their structure.

2. Data collected by the application

Nothing.

The Filarr application collects no data, sends no telemetry, and contacts no server (except for update checks, which only transmit your version number and operating system, with no personal identifier).

3. Data collected by the website

The filarr.com website collects the following data:

  • Waitlist email: If you sign up to be notified about cloud sync, we store your email address. Legal basis: consent (GDPR Article 6.1.a). You can request deletion at any time.
  • Contact form: If you contact us, we retain your name, email, and message to respond to your inquiry. Legal basis: legitimate interest (GDPR Article 6.1.f).
  • Vercel Web Analytics : The site uses Vercel Web Analytics, a privacy-friendly analytics service that sets no cookies, collects no personal data, and does not track visitors across sessions. Only aggregated metrics (page views, country of origin) are collected.

4. Data we do NOT collect

  • Content of your files or notes
  • Names of your files or folder structure
  • Encryption keys
  • Telemetry data
  • Location data
  • Browsing history
  • Tracking or advertising cookies

5. Cookies

The filarr.com website only uses a language preference cookie (fr/en). No tracking cookies, analytics cookies, or third-party cookies are used. No consent banner is necessary because we do not set any cookies subject to consent under the ePrivacy Directive.

6. Sub-processors and third parties

  • Vercel Inc. (San Francisco, USA) — Website hosting
  • Cloudflare Inc. (San Francisco, USA) — DNS and download hosting (R2)
  • OVH SAS (Roubaix, France) — Transactional email service

We do not transmit any data to data brokers, advertisers, or third-party analytics platforms.

7. Data retention

  • Waitlist emails: Retained until the cloud sync feature launches, then deleted.
  • Contact messages: Retained for a maximum of 12 months, then deleted.
  • Your local files: Stored on your device. You can delete or export them at any time. We have no access to them.

8. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights over the data we hold (emails, contact messages):

  • Access — Obtain a copy of your data
  • Rectification — Correct your data
  • Erasure — Request deletion of your data
  • Portability — Receive your data in a structured format
  • Objection — Object to the processing of your data
  • Withdraw consent — Withdraw your consent at any time (waitlist)

To exercise your rights, contact us at noreply@filarr.com. We will respond within 30 days.

If you believe your rights are not being respected, you have the right to file a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés): cnil.fr

9. Contact

For any questions regarding this privacy policy:

  • Email : noreply@filarr.com
  • Data controller : Mathis Belouar-Pruvot

10. Changes

We may update this policy. Any changes will be indicated by updating the date at the top of this page. Significant changes will be announced on the site.