Privacy policy

Last updated October 18, 2026

CelloCloud stores your photos, videos and files end-to-end encrypted: your device encrypts each file — and its name, type and dates — before it's uploaded, with keys made from your password. Those keys never leave your devices. The CelloCloud server only ever receives scrambled data that nobody else can open — not us, not our hosting providers, not anyone who got hold of the server.

What the server stores

• Your username, and data derived from your password and recovery key that lets you sign in. Not the password or the recovery key themselves.
• Your encrypted files, as numbered encrypted pieces, plus their encrypted names and details.
• How much space you use, and when files were added (needed for your storage quota).
• Your IP address, briefly, to limit sign-up and sign-in attempts and to block attackers. Not written to disk.
• Security activity: for each sign-in and wrong-password try on your account, the time, the country and the kind of device (for example "Chrome" or "Android app"), so we can warn you if someone tries to get in. Never your address. The last 200 are kept; you can see them in Settings → Security activity.
• Ad & tracker blocking (700 GB plan, if you switch it on): your private DNS address answers your devices' lookups. Unless you switch on browsing history (next), what you look up is not logged — not the names, not your address. Lookups that aren't blocked are passed on to Cloudflare's 1.1.1.1 resolver (see its privacy policy). We keep only a count of how many were blocked.
• Browsing history (700 GB plan, off unless you switch it on): the website names (like youtube.com) looked up by devices using your ad-blocking address or your VPN, when, whether they were blocked, and the device name you gave the address. Each minute's list is encrypted to a key only your account has before it's stored, so we can't read it. Kept 30 days, then deleted; switching it off deletes it all at once. It never includes search words or pages — those stay inside the encrypted connection. If other people use a device you watch this way, you're responsible for telling them.
• Dark web monitoring (700 GB plan, if you switch it on): your password is checked against Have I Been Pwned's list of leaked passwords on your own device: only the first 5 characters of its hash (a scrambled version) are sent, through us, so neither we nor HIBP learn it. Email addresses you add to watch (up to 3) are kept in our encrypted database and sent to Have I Been Pwned about once a day to look for breaches (see its privacy policy). Remove one and it's deleted. We keep the list of breaches found, to tell you about new ones.
• VPN (700 GB plan, if you add devices): for each device, its WireGuard public key, its address inside the VPN, when it was added, and its name, encrypted with your key so we can't read it. The device's private key is made on your device and never sent to us. We don't log where you go, what you look up, or when you connect; lookups through the VPN are handled like ad & tracker blocking above (so they're in your browsing history only if you switched it on). While connected, websites see the VPN server's internet address instead of yours.
• If you buy a plan: which plan, and the reference numbers Stripe gives us for you and your subscription. Payments are handled by Stripe: your card details go to Stripe, never to us.

Data is kept until you delete it or your account. Deleting a file or your account removes it from the server right away, and from backups within the hour.

How the servers are protected

• The servers sit behind a Firewalla network firewall.
• The website and apps reach them only through Cloudflare's encrypted tunnel, over HTTPS. The one port open to the internet is the VPN's, which answers only devices with a key their owner added.
• The account database is encrypted, and its key is kept encrypted by the operating system.
• Scanners, floods of requests and password guessing are detected and blocked automatically, and you're warned when someone tries to get into your account.
• None of this is what keeps your files private, though — the end-to-end encryption above is. Even if someone got past all of it, they'd only find encrypted data.

Backups

The 500 GB and 700 GB plans also keep a copy of your files on a second, separate drive. Those copies are the same encrypted pieces — still unreadable to anyone but you. The account database is also copied daily, encrypted.

What we can't do

• See your files, their names, or what they contain.
• Reset your password. Only your recovery key, shown when you sign up, can unlock your files if you forget it. If you lose both, your files can't be recovered by anyone.

What we don't do

No ads, no tracking, no analytics, no selling or sharing of data. Connections go through Cloudflare, which carries the encrypted traffic to our server.

Your choices

Delete files at any time. Delete your account in the app's settings — everything is erased. Questions: weebaddog31@gmail.com.

CelloCloud isn't for children under 13.