#Privacy Policy

Last updated: May 31, 2026

#The short version

Rabbithole's file path is encrypted: we cannot access your file contents. Files are encrypted in your browser before they reach the network. We have no master keys and no backdoors for decrypting file contents.

#What we don't collect

• File contents — we never see plaintext
• Encryption keys — they are derived via threshold cryptography and never exist in one place
• Passwords — there are none; authentication is via Internet Identity (passkeys/biometrics)
• Email addresses by default — registration does not require email. If you consent to share a verified email attribute, Rabbithole uses it for features such as invite-by-email access and future notifications.
• Browsing history or tracking data — no analytics, no cookies, no third-party trackers

#What we do process

#Internet Identity Principal

When you sign in, your browser generates a cryptographic identity (Principal ID) via Internet Identity. This identity is:

• Unique to Rabbithole (cannot be used to track you across other apps)
• Not linked to any personal information
• Stored only on the Internet Computer blockchain

#Canister interactions

Your personal storage canister records:

• File metadata (names, sizes, folder structure) — stored in your canister, not encrypted
• File contents — encrypted before they are written to the selected storage mode
• Access permissions you set

Your canister stores file records, access rules, and on-chain file bytes. Blob Storage files keep their bytes outside the canister, with verification data stored in your canister. After a successful setup handoff, Rabbithole is removed from controllers.

#Payment information

When creating a storage canister, payment covers Internet Computer network costs, the initial cycles balance, deployment operations, and related Rabbithole infrastructure. We do not store payment details.

#Data location

Your canister data is stored on the Internet Computer, distributed across independent nodes operated by different parties worldwide. Node operators do not receive readable file contents.

#Data retention

Your data persists as long as your canister has cycles (fuel). You can:

• Top up cycles directly without Rabbithole
• Delete your data at any time
• Export your data at any time

If Rabbithole ceases to exist, your canister remains accessible via its direct URL while it has cycles. On-chain files remain in the canister; Blob Storage file availability depends on the Blob Storage retention lifecycle.

#Third-party services

• Internet Identity — authentication provider (open source, operated by DFINITY Foundation)
• Internet Computer — decentralized blockchain network
• Blob Storage infrastructure — used when files are stored outside the canister; it stores ciphertext, not readable file contents

We do not use Google Analytics, Facebook Pixel, or any third-party tracking service.

#Open source

Our code is open source on GitHub. You can verify many technical claims in this policy by reading the source code. Operational settings, external providers, and network behavior can also affect how a deployed instance works.

#Changes to this policy

We will update this page if our practices change. Since we're open source, any changes are visible in our commit history.

#Contact

Questions about privacy? Open an issue on GitHub or reach out on X (Twitter).