Security

Your data stays in the EU

The database runs in Frankfurt (Germany). Files are stored in cloud storage bound to the EU jurisdiction. MoveMyFile is operated by a company in the Czech Republic.

Encrypted on the way and at rest

Every connection uses HTTPS with TLS 1.2 or 1.3; unencrypted connections are redirected, and browsers are told to use HTTPS only (HSTS). Our providers store the database and the files encrypted (AES-256).

MoveMyFile is not end-to-end encrypted: we could technically reach stored files. We do not look into them; we act on files only when the law requires it or when content is reported as illegal.

Only the right people get your files

Who may see what is checked by the database itself for every request, not only by the app. Files are downloaded through signed links that are valid for five minutes. Shared links can have an expiry, a PIN or password and a download limit; a link is blocked after too many wrong PINs.

Accounts

We never store passwords in readable form — only as a secure hash. Sign-up and sign-in are protected against bots and limited against password guessing. Signing out removes files waiting from the share menu and this device’s notifications.

Payments

Paid plans are processed by Paddle, our reseller. You enter your card on Paddle’s page; MoveMyFile never sees card details.

No advertising, no trackers

The site has no third-party advertising or tracking scripts. For statistics we keep only the country of the connection and the language — never the IP address.

Backups and checks

The database is backed up daily. Our code is reviewed for security before releases. Please keep your own copies of important files — MoveMyFile is not a backup service.

Found a problem?

Write to support@movemyfile.eu. We answer security reports quickly and fix them as a priority.