Coldstore privacy policy

Coldstore has no developer-operated server or account. Files travel directly from your phone to cloud storage you choose and control. We do not receive files, filenames, credentials, email addresses, advertising IDs, location, analytics, or crash reports.

What leaves your phone

• Selected files, an upload manifest, and signed requests go directly to the S3-compatible provider you configure over HTTPS.
• Google Play checks ownership of the optional one-time unlimited-backup unlock. We do not receive card or bank details.

Guided AWS setup opens Amazon in your browser and does not pass through a Coldstore server.

What stays on your phone

• Storage credentials protected with Android Keystore.
• The upload ledger, chosen folders, and app settings.
• An optional encryption passphrase that cannot be recovered by us.

Android cloud backup is disabled for Coldstore's private app data.

Permissions

Media and folder access is limited to content you authorize for backup. Camera access is optional for scanning an AWS setup code. Notification, network, foreground-transfer, and boot permissions keep long uploads visible and resumable. Optional biometric lock is handled by the device.

Retention and deletion

There is no developer server and no developer-side retention period. Clear app storage or uninstall to delete local credentials, settings, and the upload ledger. Files in your own storage remain until you remove them using that provider's controls. Coldstore's restricted credential cannot read or delete the archive. Google retains purchase records under its policy.

Sharing, children, and contact

We do not sell or share personal data and use no advertising, analytics, attribution, or tracking SDK. Coldstore is not directed to children. Questions: [email protected].