Effective Date: September 2026
Common privacy notice
This tool-specific layer supplements the Sorola controller privacy notice, which identifies the controller and explains legal bases, common technical data, recipients, transfers, retention and your rights.
1. Introduction
Sorola File Sharing ("the Service") is a temporary file sharing service committed to protecting user privacy. This privacy policy explains how the Service handles your data.
2. Data Collection and Usage
When you upload a file, it is stored on the server only while the share is active. A file that reaches its download limit is deleted after that download. An hourly automated sweep permanently removes an expired file, its metadata, and any encryption-key hash no later than one hour after expiry.
- No Account Required: No registration or personal identification is required to use the Service.
- Browser-encryption trust model: The browser creates the raw AES key and encrypts and decrypts the file locally. The server stores the ciphertext and a SHA-256 verifier. On download the server receives only that verifier in an HTTPS header, not the raw key. The verifier is not added to URLs, analytics or application logs. A browser extension, malware or another person using the device may still see a key entered in the browser.
- Service data: File contents and decryption keys are not added to analytics. Cookie-free site analytics are described below.
- Temporary Storage: Files are stored temporarily. The automated sweep removes expired files with a maximum delay of one hour.
3. Data Sharing and Third Parties
We do not sell, trade, or rent user data or uploaded files to any third parties. The Service does not contain third-party tracking codes or advertisements.
4. Security
All communication with the Service is conducted via secure, encrypted HTTPS protocols. Files are accessible to anyone who has the share link. Do not share sensitive files without appropriate precautions.
5. Contact
If you have any questions regarding this privacy policy, you can contact us at: contact.make@sorola.fi
Cookie-free site analytics
Google Tag Manager loads only Plausible Analytics. Plausible measures page views and form, outbound-link and download events without cookies or persistent visitor identifiers. Measurement may process the page URL, title, referrer, and browser/device information. Performance measurement uses only the product, a coarse page class, rounded Core Web Vitals, and a capped error count. Content you process in a tool is not intentionally added to analytics.