Privacy

This policy describes data processing when using Fetchoo. For privacy and data deletion requests, contact info@fetchoo.app. Include your job or request ID if available, but do not send passwords or access secrets.

What the service uses

A session cookie associates jobs with your browser. Source URLs and technical parameters are stored in the job database. Files are kept on the operator’s server disks, not an external CDN. Account passwords are not requested.

Default retention

Cookie: up to 30 days. Completed job history: up to 7 days. Ordinary file cache: 6 hours; repeated requests may extend this to 7 days from the last request. Without cache reuse, files are retained for about 1 hour. Periodic cleanup includes a 10-minute technical grace period.

Operational logs

The API uses a hash of the connection address for rate limiting. Default logs do not include source URLs, download signatures or file contents. External reverse-proxy logging and log retention are controlled by the operator.

Preferences and events

Source URLs are encrypted using a service key kept separately from the database. Keys are never sent to the browser. Direct-link logical cache is owner-scoped, while identical bytes may share one stored object. Language and format are stored locally only with consent. Optional usage events need separate consent and exclude source URLs and titles. Server and HTTP-transfer events are tracked separately and do not establish that a file was saved on a device.

Support messages and raw events are retained for up to 30 days with periodic cleanup. Messages are visible to the administrator. Admission audit entries are retained for up to one year. Nginx access/error logs are disabled by default; the dedicated transfer log contains only a random transfer ID, timestamp, method, status and bytes sent. The operator configures its rotation.