1. Who handles your data
The operator of Curtis Files at file.curtis.hk and Curtis Go at go.curtis.hk (the Operator) is the data user for the purposes set out below. This notice applies to invited uploaders, people who open a file or short link, and anyone who contacts the Operator about either service. Address privacy enquiries to the Privacy Contact at lui@curtis.hk.
2. When you upload or open a file
To accept an upload, the service needs the file and its name. It processes the contents, file size, upload time and method, share identifier, expiry setting and any password you choose to set. It uses these details to store and deliver the file, display its details, apply access rules and remove expired shares. The Operator can see guest uploads and manage their access. A person with a working share link can see the file name, size, expiry and whether a password is required before downloading. The Operator can see upload and download activity. Keep identifying details out of the file name if you wish to restrict what recipients can see.
A download request increments the file’s download count. Repeated requests may count more than once. The count available to the Operator records requests started and cannot establish that a particular person received or read a file.
3. When you open a short link
Curtis Go processes the short name and its current destination to redirect your browser. The Operator can create, change or delete the destination and see the number of opens. Repeat visits and automated link checks may count. A destination address may itself disclose personal information, including information in its query string. When your browser follows a redirect, it connects to the destination provider, which receives ordinary connection information, including your IP address, and applies its own privacy practices.
4. Access codes, Telegram and technical data
The service processes access codes and session identifiers to distinguish the Operator from invited guests and enforce permissions. A guest session uses a short-lived cookie to remember acceptance of the current Terms of Use for uploads. A download request includes the version of the Terms accepted for that download. An invitation is required to upload as a guest. A recipient needs the share link and, where set, the file password. You may decline to provide these items. The corresponding restricted function will then be unavailable.
The connected Telegram bot accepts administrative commands from the Operator’s designated private chat. Telegram processes bot interactions under its own terms. The Operator’s service may receive the Telegram user or chat identifier, commands, links, files or other message content you send to the bot. It uses these to authenticate authorised commands, carry out the requested action and reply. For delivery and retry handling, the service stores update identifiers and temporarily stores encrypted replies until delivery succeeds. An owner login code can be redeemed once on either the Files site or the associated Markdown site. An explicit owner check-in can publish the owner’s last-online time on that site. Opening a web share link alone does not require a Telegram account.
Cloudflare processes requests for these services and supplies hosting, file storage, database and network protection. Connection and security data may include IP address, time, requested route, browser or device information, errors and abuse-control identifiers. The application uses a hash derived from the connecting IP address to count attempts at restricted actions. The Operator uses the records available to it to deliver requests, diagnose faults, limit abuse and investigate security incidents.
5. Who may receive information
Recipients you share with may receive the file and information displayed with it. They can save or forward downloaded copies. The Operator and service providers acting on its instructions may access data as reasonably necessary to operate, secure or restore the services. The Operator may review a particular file, link or relevant records to resolve a reported problem or investigate suspected misuse. Information may also be disclosed to professional advisers, competent authorities or courts where necessary and permitted or required by law. Service providers may process information outside Hong Kong.
6. Limits on use, retention and security
The Operator decides how best to carry out the purposes described above. Before using personal data for a different purpose that is not directly related to the purpose for which it was collected, the Operator will obtain the affected individual’s express, voluntary consent unless a statutory exception applies. A later revision to this notice does not by itself give that consent.
At upload, guests must choose an expiry within 30 days. The Operator may later change a share’s expiry, including keeping it available until removed. One-time login codes expire after 10 minutes. Guest web sessions expire after one hour and owner web sessions after 12 hours. Scheduled cleanup is designed to remove expired session, code and rate-limit records and Telegram update records more than seven days old. Share availability follows the expiry or deletion settings. An unexpired share may be withdrawn, and a short link may be removed. Withdrawal stops future delivery through that link. Copies already downloaded remain with their recipients. The Operator will take all practicable steps to erase personal data when it is no longer needed for a disclosed purpose, subject to lawful retention requirements. Security or complaint records may be kept for as long as reasonably necessary to investigate a specific incident or handle a claim.
The Operator will take all practicable steps to protect personal data against unauthorised or accidental access, processing, erasure, loss or use. Share links, invitation codes and file passwords should be sent only to their intended recipients.
7. Access, correction and complaints
You may ask whether the Operator holds personal data about you, request a copy, or ask for inaccurate data to be corrected. Email the Privacy Contact at lui@curtis.hk with sufficient information to locate the record. Do not send passwords or copies of identification in your first message. The Operator may request proportionate proof of identity, use the prescribed request form where applicable and charge a fee no greater than that permitted by law. The Operator will respond within the applicable statutory time limit. You may also complain to the Privacy Commissioner for Personal Data, Hong Kong.
8. Revisions
The Operator will identify the current version by date and give notice of material changes before applying them where required.