FileKBहिं

Privacy policy

Aapki file kabhi upload nahi hoti — yeh policy batati hai ki phir bhi kaun sa chhota data process hota hai, kitne din rehta hai, aur kaise mana kar sakte ho.

Last updated: 17 September 2026. Operator and Data Fiduciary: Manish Kumar (individual, Gaya, Bihar, India — see About FileKB). Contact: hello@filekb.com. यह नीति हिंदी में भी उपलब्ध है: गोपनीयता नीति (हिंदी).

Your files — processed only in your browser

Files you select are processed entirely inside your browser using JavaScript. FileKB's servers never receive, store or see your photos, signatures or PDFs. The only data that leaves your browser is (a) standard web-server access logs, (b) Google Analytics measurement events, (c) Google AdSense advertising requests, and (d) text you voluntarily type into the feedback form.

There is no upload endpoint in the site's code. Nothing is stored beyond the life of the browser tab; closing the tab discards it. You can verify this yourself: load a tool page, disconnect from the network, and use the tool normally — it keeps working.

The site also uses a browser security policy (a Content-Security-Policy header with a connect-src allow-list) that tells your browser which servers the page is allowed to contact at all. File data cannot be sent to any server that is not on that list, and FileKB's own servers are not a destination for file data.

Personal data notice

This notice is given at or before the time data is processed, in the manner the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 require for a notice to a Data Principal. It is available in English and in Hindi.

Data items processed.

  1. Server access logs. Technical request data your browser sends to the hosting provider (Hostinger): internet protocol address, user-agent string, requested address, referrer and timestamp.
  2. Google Analytics 4 (property G-6R24TE7K97). Page views and anonymous interaction events (for example "tool used", "download clicked") with a random client identifier stored in a first-party cookie, plus coarse device and location information. GA4 does not log or store IP addresses from users in the European Union, Switzerland or the United Kingdom; for all users the IP address is used only to derive a coarse location (country or city) and is then discarded. We never send your name, e-mail address, file names or file contents to Google Analytics.
  3. Google AdSense. Where advertising is enabled and, in regions that require it, only after you consent: identifiers and device or browsing signals collected by Google through its own scripts and cookies to select, deliver and measure advertisements.
  4. Consent record. Your advertising and measurement choice and the date you made it, stored in your own browser's local storage.
  5. Feedback text. Anything you voluntarily type into the feedback form on the contact page (short text, the type of report and the address of the page you were on). Please do not include roll numbers, phone numbers or other identifiers — they are not needed to fix a page.

Purposes. Access logs are used to serve the site and to investigate abuse and errors. Analytics data is used to understand which pages and tools are useful and to find broken ones. Advertising data is used by Google to select and measure advertisements, which is how the running cost of a free site is met. The consent record is used so you are not asked repeatedly. Feedback text is used only to fix the problem you reported.

No file data is included in any of the above. Your images and documents are not part of any of these categories because they never leave your device.

Recipients. Hostinger (hosting and server logs), Google LLC and Google Ireland Limited (Analytics, AdSense and the consent management platform), and Google Firebase (Firestore database that stores feedback messages). FileKB does not sell personal data and shares nothing else with anyone.

Retention.

Cookies and consent management

FileKB itself sets no tracking cookie. Local storage on your device holds your consent record, your language choice and your last-used tool settings.

Google Analytics sets first-party cookies (_ga, _ga_*) to recognise a returning browser. Google AdSense may set advertising cookies after you consent. Both are controlled by Consent Mode v2 signals (ad_storage, analytics_storage, ad_user_data, ad_personalization) that the page sends to Google's tag before any of its scripts run; where consent is refused these signals stay "denied" and no advertising or analytics cookie is written.

Visitors in the European Economic Area, the United Kingdom and Switzerland are shown a consent message from a Google-certified consent management platform that follows the IAB Europe Transparency and Consent Framework (TCF v2.3). The first screen offers "Consent", "Manage options" and "Do not consent" with equal prominence. Until you choose, only non-personalised (contextual) advertising and cookieless measurement pings are used. Refusing does not limit any tool.

Visitors elsewhere, including India, see a short notice on first visit. You may withdraw or change your choice at any time with the same ease as it was given, using the "Advertising choices" control in the site footer.

How to withdraw consent. Use "Advertising choices" in the footer, or clear your browser's site data for filekb.com (which also erases the consent record, after which you are asked again). Withdrawal takes effect for future page loads; personalised advertising stops, while contextual advertisements may still be shown. Withdrawal does not affect processing already carried out. You can additionally opt out of Google Analytics in every website with Google's browser add-on and manage Google's advertising cookies at adssettings.google.com.

Your rights and grievance redressal

Under the Digital Personal Data Protection Act, 2023 you may ask what personal data about you is being processed, ask for its correction, completion, updating or erasure, nominate another person to exercise your rights, withdraw consent, and complain about how a request was handled. Because this site holds almost no personal data, most requests are answered by explaining that there is nothing on file; where a feedback message can be identified from what you tell us, it will be deleted.

Grievance officer / data contact: Manish Kumar, hello@filekb.com (postal enquiries: Gaya, Bihar, India — write to the e-mail first). Requests are acknowledged within a few working days and resolved within 90 days, the period fixed by the DPDP Rules, 2025. If you are not satisfied with the response, you may escalate to the Data Protection Board of India. Visitors in the EEA, UK or Switzerland may also complain to their local data-protection authority.

Security

Access to the administration panel is restricted to named Google accounts with two-factor authentication behind a second server-side password gate; the database rules deny all public reads; the site is served only over HTTPS with HSTS. Security researchers can find our contact details at /.well-known/security.txt and our disclosure policy at /security/. If personal data were ever compromised, affected users and the Data Protection Board of India would be informed as the law requires — because feedback is anonymous, that notice may take the form of a banner on this site.

Children

The site is not directed at children under 18, collects no age information, and shows no personalised advertising to any user who has not consented. Parents or guardians who believe a child has sent us personal data may write to the grievance officer to have it erased.

Changes

Material changes to this notice are published on this page with a new date at the top. Any future feature that would send file data to a server would require a change to this policy before launch, a separate consent, and a rewording of the "nothing is uploaded" statements across the site. The withdrawal control in the footer works regardless of any change. Use of the site itself is governed by the terms of use.