Simpanan
ID Create account

Privacy policy

This policy explains what data we collect when you use Simpanan, what it's used for, and your rights over it.

Effective 2026-09-26

Who we are

Simpanan is run by Simpanan, Indonesia. For privacy questions, contact [email protected].

What we collect

  • Account data: username, email address and password. Passwords are stored hashed, never as plain text.
  • Files and their details: the files you upload, with their name, folder, type, size, image dimensions, tags and upload date.
  • A session cookie: one cookie called sid that keeps you logged in. It lasts up to 30 days, can't be read by scripts, and is removed when you log out. We use no advertising or analytics cookies.
  • Technical data: IP address, browser type and access times, logged by our hosting servers and Cloudflare for security and troubleshooting.

What we use it for

  • Running the service: storing, resizing, converting and delivering your files.
  • Keeping accounts and the service secure, including preventing abuse.
  • Answering questions and handling plan changes and payments.
  • Meeting legal obligations.

We don't sell your data and don't use it for advertising.

Third parties

  • Hostinger provides the servers and database where your account and files are stored.
  • Cloudflare sits in front of our website and CDN for security and speed, so it processes incoming requests.
  • Google Fonts serves the typefaces used on the website and library, so your browser connects to Google's servers when pages load.

Files you share

Every file has a link that anyone who knows it can open, because files are meant to be shown on websites. The list of your files is visible only to you and Simpanan's admins. Don't upload documents with sensitive personal data that others must not see.

How long we keep data

Account data and files are kept while your account is active. When you delete a file, it's removed from the server. When you ask for your account to be deleted, the account and all its files are deleted within a reasonable time. Backup copies held by our hosting provider may remain briefly before they expire automatically.

Your rights

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022), you can ask to access, correct or delete your personal data, and withdraw consent to its processing. Send requests to [email protected] from your account's email address.

Security

Connections to Simpanan use HTTPS, passwords are stored hashed, and uploaded HTML or SVG files run in a sandbox so they can't steal login sessions. No system is completely immune, so use a strong, unique password.

Changes to this policy

If this policy changes, the date above is updated. For significant changes, we email account holders.