Privacy

GpuFiles is built so that it holds as little about you as it can. This policy says what it does hold, for how long and why.

No accounts

There is no sign-up. We do not collect names, email addresses or phone numbers, and we run no analytics or advertising trackers.

What the service processes

• Fragments of your documents. Sentence-sized pieces of text, shuffled and mixed with decoys, without file names, order or the map back to your documents. They are stored while your job runs so miners can read them, and deleted when your browser collects the vectors, or after 24 hours.
• A hash of your job secret. Used to let only your browser read and delete the job.
• Mining sessions. A random id per browser with counters (fragments embedded, shares, checks). No IP address or device identifier is attached to it.
• Free tier. A daily-salted hash of the first three parts of your IP address, with the number of free fragments used that day. The address itself is not stored and the salt changes every day.
• Redemptions and payments. Payout addresses, nullifiers of redeemed notes and the transactions that paid them. Payer addresses of x402 payments are on-chain. Blockchain records are public and permanent by nature.

What stays in your browser

Your documents, the map from fragments to documents, the vectors, your index, your job secrets, your mining session id and your notes are kept in this browser's storage (IndexedDB and local storage). We cannot read them. You can erase them in the app or by clearing site data.

Miners

Miners are other people's browsers. A miner's tab reads the fragments it is assigned in order to embed them. The scheduler limits what any session receives; see the documentation.

Processors

The site and its API run on Vercel; the database is a managed Postgres service; the embedding model and pdf.js are downloaded by your browser from public CDNs; payments and payouts settle on Robinhood Chain. These providers process network data such as IP addresses to deliver their service.

Your rights (GDPR)

You have the right to access, correct, delete, restrict or object to the processing of personal data that relates to you, and to complain to your data protection authority. Because we hold no identity, we may need you to show which job, session or address is yours. Write to us through our X account: https://x.com/gpufiles. On-chain records cannot be erased by anyone.

Legal basis

Processing is necessary to provide the service you request (contract), and for the free tier's abuse limits (legitimate interest).