Privacy Policy

1. Who we are

Reafile is a product of Reawon Studio. For privacy matters, contact us at privacy@reawon.com.

2. File processing — we see nothing

All file conversions, compressions, and other operations run entirely inside your browser using WebAssembly. Your files are never uploaded to our servers. We have no technical ability to access, store, or share any file you process with Reafile.

3. Account data

If you create an account, we collect and store:

• Your email address
• A securely hashed password (if you use email/password sign-in)
• Your name as provided by Google or GitHub if you use OAuth

This data is stored by Supabase (our authentication provider) in encrypted databases within the EU. Supabase is SOC 2 Type II certified.

4. Analytics

We use PostHog for anonymous, aggregated analytics — page views, feature usage, and error rates. PostHog does not collect file names, file content, or any personally identifiable information beyond a random anonymous session ID. You can opt out at any time by enabling your browser's Do Not Track setting.

5. Cookies

We use the following cookies:

• Auth session cookie — required to keep you logged in. Expires when you sign out or after 7 days.
• Theme preference — stores your light/dark mode choice. No expiry, local to your device.
• Analytics — a random anonymous ID for PostHog. Expires after 1 year.

We do not use advertising, tracking, or third-party marketing cookies.

6. Data sharing

We never sell, rent, or share your personal data with third parties for marketing. We share data only with the sub-processors necessary to run the service (Supabase, PostHog), under data processing agreements.

7. Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, delete, or export your personal data. To exercise any of these rights, email privacy@reawon.com and we will respond within 30 days.

8. Data retention

Account data is retained for as long as your account is active. You may delete your account at any time, after which all personal data is permanently erased within 30 days.

9. Changes to this policy

We will notify registered users by email of any material changes to this policy. The "last updated" date at the top of this page will always reflect the most recent version.