← Back to Replico

Privacy Policy

Replico ("we", "us", "our") operates the application and web service at replico.dev. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account Data

• Email address - used to identify your account and for login
• Hashed password - stored using bcrypt; we never see or store your plain-text password
• API key - a unique token generated for your account to authenticate uploads

Content You Upload

• Screen recordings - MP4 and/or GIF files you choose to upload through the Replico application
• File metadata - file type, size, and upload timestamp

Usage Data

• Storage usage - total bytes used and quota limits per account
• Login timestamps - account creation date is stored

2. How We Use Your Data

• Email & password - solely for account authentication
• API key - to authenticate upload requests from the Replico desktop application
• Uploaded files - stored on our server and served at the shareable link you receive
• Storage metrics - to enforce per-account storage quotas (200 MB default)

3. Data Sharing

We do not sell, rent, or share your personal data with third parties. Your uploaded files are only accessible via the unique link generated for each upload. Links are not publicly listed or indexed.

4. Data Retention

• Files and metadata are retained until you delete them through the application or an administrator removes them
• When you delete a file, it is immediately removed from our server
• When you delete your account, all associated data (files, metadata, API keys) is permanently removed

5. Security

• All data in transit is encrypted via HTTPS/TLS (Cloudflare-provisioned SSL)
• Passwords are hashed with bcrypt before storage
• API keys are random 24-character tokens stored in Redis
• File uploads are restricted to MP4 and GIF formats with a 100 MB per-upload limit

6. Cookies

The Replico web application (admin panel) uses localStorage to store your admin session token. The main site and file serving do not use cookies or any client-side tracking whatsoever.

7. Your Rights

• Access - You can view your stored files and quota at any time through the Replico application
• Deletion - You can delete individual files from the Uploads tab, or permanently delete your entire account from Settings under Danger Zone. Deleting your account removes every file you have uploaded and cannot be undone
• Data portability - You can download your files directly from the shareable links

To exercise any of these rights, contact us at [email protected].

8. Administrator Access

Replico administrators have access to:

• Total storage statistics (aggregate file counts and disk usage)
• User account information (email, storage used, quota, file count, join date)
• The ability to delete user accounts and their associated data

Administrators do not have direct access to user passwords (they are hashed) and do not routinely access uploaded file content.

9. Third-Party Services

• Cloudflare - provides DNS, SSL termination, and CDN/proxy services. Cloudflare may process request headers and IP addresses per their privacy policy

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of Replico after changes constitutes acceptance of the updated policy.

11. Contact

For privacy inquiries, data deletion requests, or questions about this policy: