Privacy

• Your files stay in your storage. MyLoft reads and writes them there and doesn't keep copies of them.
• MyLoft keeps your account, your settings and an index of what's in your MyLoft folder, so it can show things quickly.
• No ads, no tracking, no selling your data, and no training AI on it.
• You can delete your account at any time in Settings, and everything MyLoft keeps about you goes with it.

For questions or requests about your data, write to [email protected].

When you connect storage, such as Dropbox, MyLoft works inside its own folder there (on Dropbox: Apps › MyLoft) and nothing else. Your files are kept by that provider, under its own terms and privacy policy. Files you upload, open or play pass through MyLoft's servers on their way, but aren't kept there.

• Your account: your email address and your password, stored only as a secure hash.
• Your settings: things like your wallpaper, appearance and where your windows go.
• Your storage connection: which provider, the account name and email it reports, and the access key MyLoft needs to reach it, encrypted.
• An index of your MyLoft folder: the names, sizes and dates of files and folders, and details read from MyLoft's own files, such as reminder titles and due dates, note titles and tags, event times and contact names. It lets lists, the Today panel and search work without opening every file.
• Search text, only if you turn it on: with "Search inside files" on (Settings › Search), a copy of the text in your notes and other text files, so search can find words in them. It's off unless you turn it on.
• Short-lived copies, for speed: small previews of your photos, cleared with every update of MyLoft, and recently opened text files held in memory, gone when the server restarts.
• Signed-in devices: the IP address and browser of each signed-in session, to keep your account secure. For a few minutes after a sign-in attempt, MyLoft also counts attempts per email address and scrambled (hashed) IP address, to stop password guessing.
• Access requests: if you request access, your name, email address and answers, with a hashed IP address and your browser.

• No ads, no analytics and no tracking cookies.
• It doesn't sell your data or share it for marketing.
• It opens your files only to show them to you and to run the features you use.
• It doesn't use your data to train AI.

• Hetzner runs the servers MyLoft is on, in Germany.
• Cloudflare sits in front of myloft.app: it carries your traffic and protects the service from attacks.
• Google reCAPTCHA checks the sign-in and request-access forms for bots. Google's Privacy Policy and Terms of Service apply to it.
• Your storage provider, which you choose.

Some of these may handle data outside your country.

MyLoft sets one cookie, to keep you signed in. Google reCAPTCHA may set its own cookies on the forms that use it. There are no tracking or advertising cookies. MyLoft also remembers a few things in your browser itself, such as games in progress and where you stopped a video or song; they stay on your device.

• Your account, settings and index: as long as you have an account.
• Disconnecting your storage deletes its index and search text right away.
• Deleting your account deletes everything listed above right away. Your files stay in your storage.
• Backups of MyLoft's database are deleted after 30 days, so deleted data can remain in a backup for up to 30 days.
• Access requests: up to 12 months.

In Settings you can change your settings, turn search text on or off, disconnect your storage and delete your account. You can also ask for a copy of what MyLoft holds about you, ask for it to be corrected, or ask for it to be deleted: write to [email protected], and you'll get an answer within 30 days. If you're unhappy with how your data is handled, you can complain to your data protection authority.

MyLoft is for people aged 18 and over.

Connections to MyLoft are encrypted, passwords are stored as secure hashes, and storage access keys are encrypted when stored. No service can promise perfect security, but MyLoft is built to keep as little as it can.

If this page changes, the date at the top changes with it.