Privacy

Last updated: 6 November 2026. Courtesy translation: the French version prevails.

Confidence is built to know as little as possible. Here is what we process, and why.

What is encrypted on your side

The file and its name are encrypted in your browser (AES-256-GCM) with a key derived from the password (PBKDF2-SHA256, 310,000 rounds). The password and the key are never sent to our servers. We cannot read your files.

What we keep

• Your account: first name, email, password (stored as a hash), number of sends left. Legal basis: performance of the contract.
• Your sends: an encrypted file (erased right after opening, or when the time you chose runs out: 48 hours at most, 7 days with a paid offer), its size, its general type (audio, video, image, PDF, file), the dates it was sent and opened, the number of password tries. Dates and status are kept as long as your account exists, to show you the status of your sends.
• Your connected devices: to show them to you and let you log them out, we keep, as long as the session exists, the browser type and the IP address of each connection. If you turn on two-step verification, we keep an encrypted secret key and backup codes as hashes. Your language (French or English) is also remembered.
• Your payments: handled by Stripe. We never see your card number; we keep the amount, the date and the order reference, for 10 years (accounting obligation).
• Contact form: your first name, email and message reach us by email; nothing is kept on the Confidence server.
• Technical logs: IP address and requests, kept by the host for security and to fight abuse, for a limited time.

Cookies

A session cookie, needed to log in and for security, and a language cookie (French or English) to show the pages in your language. No advertising, no tracking. A simple visit counter, with no cookie and without keeping any IP address.

Recipients and transfers

Hostinger (hosting), Stripe (payment). No data is sold. The recipient of a send does not need an account. For a send to several people, we only keep the first name you type, until one hour after the send is erased. Your notification emails only contain the send number and, for several people, that first name.

Your rights

Access, rectification, erasure, restriction, objection, portability: write to contact@belentia.fr, we reply within a month. You can also contact the CNIL, the French data protection authority (cnil.fr).

Honest limits

The recipient can copy or photograph what they see. If the password is lost, the file cannot be recovered, even by us.