Privacy Policy

Last updated: March 24, 2026

1. Introduction

Storing (“we”, “us”, “our”) operates the websites storing.app and use.storing.app, along with associated CLI tools and APIs (collectively, the “Service”). This Privacy Policy explains how we collect, use, and protect your information when you use the Service.

2. Information We Collect

We collect the following types of information:

• Account information: Email address and name when you create an account.
• Usage data: Compression statistics (file sizes, formats, tiers, savings) and file metadata (filenames, dimensions). We do not access or store the visual content of your files.
• Cloud provider tokens: OAuth access tokens for AWS S3 and Google Cloud Storage access. These tokens are used solely to interact with buckets you explicitly connect.

3. How We Use Your Information

• Provide the Service: Authenticate you, compress your images, manage your connected buckets, and deliver optimized files.
• Improve compression algorithms: Aggregate, anonymized usage data helps us tune compression quality and performance.
• Send notifications: Transactional emails such as job completion notifications. We do not send marketing emails without your consent.

4. Google User Data

We request Google Cloud Storage access via OAuth. We use this access solely to list, read, and write image files in buckets you explicitly connect. We do not store, share, or use your Google data for any purpose beyond providing the optimization service.

Access tokens are encrypted at rest. You can revoke Storing's access at any time from your Google Account settings.

5. Data Storage & Security

• Data is stored on AWS infrastructure in the ap-southeast-1 (Singapore) region.
• All data is encrypted in transit using TLS.
• Passwords are hashed with bcrypt.
• API keys are hashed before storage — only a preview suffix is retained for identification.
• OAuth tokens are encrypted at rest.

6. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion.
• Usage logs: Retained for 90 days.
• Compressed files in staging: Automatically deleted after 72 hours.

7. Third-Party Services

We use the following third-party services to operate Storing:

• Amazon Web Services (AWS): Hosting, S3 storage, SES email delivery.
• Google Cloud: OAuth for Google Cloud Storage bucket access.
• Sentry: Error monitoring and performance tracking.
• Cloudflare: DNS and CDN.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate personal data.
• Request deletion of your account and associated data.

To exercise any of these rights, email us at [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.

10. Contact

If you have questions about this Privacy Policy or our data practices, contact us at [email protected].