Effective: 31 October 2026
1. Controller
bigfile.ch, Seehaldenstrasse 28, 9404 Rorschacherberg, Switzerland, email: info@bigfile.ch.
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, for example for users in the EEA, we comply with it as well.
2. Data we process
- Website visits: IP address, date and time, pages visited, browser, operating system and referrer (server log files), for operation, security and abuse prevention.
- Transfers: uploaded files, file names and sizes, selected options, sender and recipient email addresses and message (when sending by email), download events.
- Account: name, email address, password (stored encrypted), settings, branding details (Pro), transfer overview.
- Payment (Pro): subscription status, billing data; card details are processed exclusively by Stripe and are not stored by us.
- Contact: information you send us by email or via the contact form.
3. Purposes and legal bases
We process data to provide the service (contract, Art. 6(1)(b) GDPR), for security and abuse prevention (legitimate interest, (f)), to meet legal obligations such as retaining accounting records ((c)), and for advertising and statistics only with your consent ((a)).
4. Storage location and processors
We use the following service providers, who process data on our behalf:
- File storage: Cloudflare R2 (Cloudflare, Inc.) with data stored in the EU.
- Email delivery: Metanet AG, Switzerland.
- Payments: Stripe Payments Europe Ltd., Ireland.
- Advertising and statistics: Google Ireland Limited (see section 6).
A transfer to countries without an adequate level of data protection (e.g. the USA) cannot be ruled out for Cloudflare, Stripe and Google. It takes place on the basis of standard contractual clauses or the Swiss-U.S. or EU-U.S. Data Privacy Framework.
5. Retention and deletion
- Transfers are deleted automatically when the selected availability expires or after a one-time download.
- Account data is kept as long as the account exists and deleted after the account is deleted.
- Server log files are deleted regularly unless needed to investigate an incident.
- Billing and accounting data is kept for the statutory period of 10 years.
6. Cookies, advertising and statistics
We use technically necessary cookies (e.g. session, login, “stay signed in”). For advertising (Google AdSense) and statistics (Google Analytics 4), we only set cookies if you consent via Google’s consent dialog. You can change your choice at any time via “Cookie settings” in the footer. Google Analytics 4 truncates IP addresses. Downloads from Pro senders are ad-free.
7. Data security
Data is transmitted encrypted (HTTPS/TLS). Transfers are only accessible via their unique link and can additionally be password-protected. Absolute security cannot be guaranteed on the internet.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent. Contact info@bigfile.ch. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or a supervisory authority in the EEA.
9. No automated decisions
We do not make automated individual decisions or carry out profiling within the meaning of the FADP. Personalised advertising by Google only takes place with your consent.
10. Changes
We may amend this privacy policy. The current version published on bigfile.ch applies.