Privacy

Two things carry the Subfile name: the app you install, and this website. They have different answers, and collapsing them into one reassuring sentence would be the kind of thing this product exists to avoid.

The app collects nothing

Subfile makes no network requests. Not for licensing, not for updates, not for crash reports, not for usage statistics. There is no account, no email required to run it, and no telemetry of any kind — not disabled by default, not off in a settings pane. Absent.

You can verify this rather than take our word for it. Turn networking off entirely, or point a firewall at the app, and every feature still works. That is the test we designed against.

Your vaults, your files and your passwords never leave your device. Keys are derived from your password on the machine and are never stored anywhere, which is also why a lost password cannot be recovered by us or anyone else.

This website uses Google Analytics

subfile.app runs Google Analytics 4. It records page views, which page you arrived from, an approximate location derived from your IP, and coarse device information such as browser and screen size. It sets first-party cookies to recognise a returning browser.

Advertising signals are switched off: ad storage, ad user data and ad personalisation are all denied by default, so nothing here feeds remarketing or an advertising profile. We do not run ads and do not sell or share this data.

This is ordinary marketing analytics and we would rather say so than pretend otherwise. If you do not want it, any content blocker stops it, and the site works exactly the same without it.

If you join the waitlist

The form stores your email address on our own server, along with which button you pressed and which operating system you were on. That context tells us which platform to build for next, and nothing more.

• One email when the app ships. No newsletter and no drip sequence.
• No tracking pixels in the message.
• Never sold, never shared, never passed to an advertising network.
• Ask and we delete it — write to the address at the bottom of this page.

Where the data lives

Your vaults

Only on your device. We never see them.

Your password

Never leaves the machine, never stored.

Waitlist email

Our own server, not a third-party CRM.

Site analytics

Google Analytics 4, ad signals disabled.

Contact

Questions about any of this, or a deletion request: write to hello@subfile.app.