Privacy Policy

ShredMeta is built so your files are never stored. This policy explains exactly what happens to a file you upload, and the little we keep to run your account. Plain language, no surprises.

Your files

• Uploaded files are held only in memory (a RAM-backed store) — they are never written to a hard disk.
• The original is deleted the instant a cleaned copy is created.
• The cleaned file is deleted as soon as you download it, or automatically after a short timeout (about 30 minutes) if you don't — whichever comes first.
• We only ever read a file's contents to extract and remove its metadata, which is the service you asked for. We never use your files for analytics, advertising, or training anything.
• Restarting our servers wipes everything by design.

What we keep

To run your account we store, in our database:

• Your email address.
• A hashed password, or — if you use Google sign-in — a Google account identifier. We never see your Google password.
• Usage records: the count and timestamps of files you've processed, to enforce plan limits. Not the files, not their names, not their metadata.
• Your subscription status (plan, billing period).

We do not store your filenames or any metadata extracted from your files.

Who we share with

• Stripe processes payments for Plus, Pro, Business, and one-time credit packs. Your card details go straight to Stripe — we never see or store them.
• Google, only if you choose to sign in with Google.
• Plausible, a privacy-friendly, cookieless analytics tool, if enabled — it collects no personal data and sets no cookies.
• Our hosting provider, which runs the server the app is deployed on.
• Cloudflare provides DNS and email routing for shredmeta.com, so emails you send us pass through it.
• A transactional email provider delivers account emails, such as password resets — it only ever sees your email address.

We never sell your data, and there are no advertising or tracking cookies anywhere on the site.

Cookies

The only thing we store in your browser is a sign-in token (in local storage) so you stay logged in. There are no advertising or analytics cookies.

Your rights

Under UK/EU data protection law you can access, correct, export, or delete your data. Deleting your account removes your email, password, usage records and subscription data. To make a request, email privacy@shredmeta.com.

Changes

If this policy changes materially we'll update the date above and, where appropriate, let you know. Questions? privacy@shredmeta.com.