Privacy Policy

Scope

This policy covers the Openable website, browser-based file recovery tools, and authorized social platform connections.

File processing

Openable processes selected files inside your browser. File contents, filenames, folder paths, checksums, and previews stay on your device.

If you save a scan to the local library, your browser stores its manifest and may store selected originals and recovered copies in IndexedDB. Large source selections are not duplicated into browser storage. You control this library and can delete saved scans from the browser.

Information Openable receives

Service and security data

Web requests may include an IP address, browser information, requested page, referral information, and time of access. The server derives a country code locally to choose a language. Routine server logs are generally retained for 14 days.

Product analytics

Openable uses PostHog EU Cloud for limited analytics. This may include a pseudonymous browser identifier, page paths, referral origins, performance measurements, sanitized errors, and interactions with marked links or buttons. Session recording is disabled. Browser Do Not Track settings are respected.

Recovery statistics

Analytics may include scan mode, file counts, format categories, size and duration buckets, result categories, recovery outcomes, and download counts. File contents and identifying file details stay outside analytics.

Device preferences

A language cookie can remember your choice for one year. PostHog stores its pseudonymous analytics identifier in local storage.

Account-free scan allowance

Openable assigns a random, pseudonymous browser identifier in an HttpOnly cookie and records only the number of bytes reserved and scanned against the free allowance. Filenames, paths, checksums, formats, and file contents are not included. A keyed, non-reversible representation of the requesting network address limits excessive creation of new browser identifiers.

How information is used

Openable uses service data to provide and secure the website, remember language preferences, understand aggregate product performance, improve recovery workflows, diagnose errors, and operate authorized social publishing.

Where applicable, processing relies on providing the requested service, legitimate interests in operating and improving Openable, consent, and compliance with legal obligations.

LinkedIn connection

When a LinkedIn Page admin authorizes Openable, the integration may receive the admin and Page identifiers, Page roles, authorization tokens, Page content, publishing results, analytics, and social interactions needed to publish and measure Openable Page activity.

LinkedIn data is used only to manage the authorized Page. Member profile data is refreshed or deleted within 24 hours, and member social activity within 48 hours, unless LinkedIn permits a longer period. Authorization credentials are retained until the connection is revoked, expires, or is deleted.

AI-assisted content uses materials supplied by Openable. LinkedIn member data is excluded from AI training and content generation.

Service providers and disclosure

Openable uses Hetzner for hosting, PostHog EU Cloud for analytics, and LinkedIn when an administrator enables the integration. These providers process information to deliver their services under their own terms and data protection commitments.

Openable never sells personal information or uses it for targeted advertising. Information may be disclosed when required by law or needed to protect users, Openable, or the public.

Retention and control

Device-local files remain until you delete them or clear browser storage. Language preferences expire after one year. The anonymous scan cookie lasts up to 400 days, quota records are removed after two years without quota activity, and network abuse keys expire after their short rolling window. Analytics are retained while useful for product and security analysis, then deleted or aggregated. LinkedIn data follows the periods described above and LinkedIn's current requirements.

You can clear browser data, enable Do Not Track, revoke LinkedIn authorization, or request access, correction, or deletion of information associated with you. Openable will honor applicable privacy rights and verify requests when needed.

Security and changes

Openable uses encrypted connections, limited access, and data minimization to protect information. This policy may change as the service develops. The effective date above will reflect material updates.