Privacy Policy

We take the handling of personal data seriously. What follows explains how data is treated by the services running on the filezilla-project.org domain (the website) and by the FileZilla programs themselves (the software).

As the controller of that data we follow the European Union's General Data Protection Regulation (GDPR); everyone visiting the site or running the programs is a data subject in the sense of that regulation.

Data handled by the website

Every page request is written to a short-lived log so that abuse can be spotted and the service kept healthy. Such an entry holds the address requested, the moment of the request, the IP address and the browser's user agent string. Nobody outside receives it, and it is discarded automatically after ten days at the latest. The legal basis is Art. 6 (1) point f GDPR.

So that advertising can be shown, the country a visitor appears to come from may be passed on to advertisers.

Aggregate figures that permit no conclusion about an individual may be gathered for statistics, and those aggregates may be shared with outside parties.

Certain services on the website let you open an account, which requires an e-mail address alongside the user name you pick. Everything done through an account is recorded, including the name, the IP address and the content submitted. Your profile and the texts and pictures you post are visible to everyone. Such records may be kept indefinitely unless you ask for removal or the law demands it. Non-public data is not passed to third parties. Creating an account, and the processing that follows, rests on your consent under Art. 6 (1) point a GDPR.

Some parts of the website set cookies in order to keep a session together. Browsers can be configured to refuse them. These cookies stay with us and go nowhere else. Their use rests on Art. 6 (1) point f GDPR, in the interest of keeping the services convenient and working properly.

Data handled by the software

The software may contact the website now and then on its own to find out which version is current. Doing so transmits, for purely technical reasons, the installed version, the name of your operating system and the processor architecture, on the basis of Art. 6 (1) point f GDPR. That information is not passed to anyone else. Anonymous aggregate statistics that reveal nothing about individuals may be derived from it.

Installers that carry offers may involve outside advertising companies serving those offers while you install. Their privacy statements can be read at the beginning of the installer, before any offer appears.

Beyond this, nothing that identifies you personally and nothing about how you work with the software is recorded without your agreement.

Reaching a remote server or a cloud provider generally calls for credentials: a user name, a password, an API key or an access token. Whatever you type into the software or grant to it serves authentication alone, so that folders can be listed, files managed and data exchanged with your own machine. Neither we nor anybody else can reach your credentials, your files or their metadata. Credentials can optionally be stored for later use, sealed with a master password, and by default that store stays on your own computer.

Whenever you connect to a server or a cloud provider, it is worth reading that provider's own privacy statement as well.

Rights you hold

Articles 15, 16, 17, 18 and 20 of the GDPR give you the right to see your personal data, to have it corrected or deleted, to have its processing restricted, and to receive it in portable form.

Consent once given can be taken back at any time under Art. 7 (3) GDPR.

You may object to processing under Art. 21 GDPR.

Write to [email protected] to make use of any of these rights and you will receive an answer without unnecessary delay.

No automated decision-making within the meaning of Art. 22 GDPR takes place.

Art. 77 GDPR additionally entitles you to complain to a supervisory authority.

Who is responsible

The controller behind this statement and the processing described here is Tim Kosse, Lukasstr. 10, 50823 Cologne, Germany.

Questions about this text go to [email protected].

Last revision of this text: 2019-12-13.