Privacy Policy
Last updated:
1. Who we are and how to contact us
This policy covers Atlas File Manager and atlasnative.com, including the current website and its static edge version. Cuber Labs, the publisher of Atlas File Manager, operates the Atlas product and website. For privacy questions or requests, email support@modhyt.org. You do not need a Discord account to exercise your privacy rights.
2. Files and information processed on your device
Atlas accesses the files, folders and storage locations you browse or choose to manage. Depending on the action, this includes file contents, names, paths, sizes, timestamps, previews and other metadata. File paths and contents can contain personal information.
Local browsing, search, file operations, previews, conversion, cleanup and encryption run on your device. Atlas does not upload your local files to an Atlas server for those operations. Optional tools and external applications you choose to use have their own behavior and terms.
Atlas saves preferences, tabs and sessions, profiles, bookmarks, tags and search data locally. Cloud settings, transfer journals, temporary remote-file previews and technical diagnostic logs may also be stored locally. Logs can contain paths and error details. Do not post a log publicly without checking it for private information.
Private-folder encryption is local. Mounting a private folder as a Windows filesystem uses optional WinFsp integration. If it is missing and you choose Download and install WinFsp, Atlas downloads a pinned official installer, verifies its SHA-256 and asks Windows to run it. Windows may request administrator approval. After successful installation Atlas retries mounting the folder. Cancellation preserves your encrypted folder; a restart may sometimes be required. When you open a file with another application or copy it out of a private folder, that application or destination can retain unencrypted data. Keep independent backups and protect your passphrase.
3. Cloud, network and third-party connections
If you connect a cloud account, SFTP/FTP server, network share or other remote location, Atlas and its provider tools communicate with the service you selected. Listing, previewing, downloading, uploading, copying or synchronizing remote files can transmit file names, paths, metadata and file contents to or from that service. Existing connections may reconnect or mount automatically when you have enabled that option.
Authorization may involve the provider's sign-in page, OAuth tokens, server addresses or credentials. Connection information is stored locally by Atlas and its provider tools. Remove a saved connection in Atlas and revoke its authorization at the provider to stop future authorized access. Previously uploaded files remain subject to that provider's retention and deletion controls.
Use encrypted services such as HTTPS, SFTP or FTPS where available. Plain FTP does not provide transport encryption. Cloud providers, remote servers, external preview/conversion tools and applications you launch process data under their own policies. Atlas does not control those services.
4. Updates, downloads and desktop diagnostics
Atlas checks for updates over HTTPS when it starts. The update server receives the connection's IP address, request time and technical request information, including the Atlas version in the User-Agent. This check does not send a list of your files or their contents.
When you request an extension, icon theme or optional tool, Atlas contacts its catalog and download hosts, which may include Cloudflare, GitHub, Open VSX and the tool's publisher. Those services receive ordinary network request information. Requesting WinFsp installation contacts its official GitHub download service.
The desktop application does not send background usage analytics and never uploads diagnostic logs or crash data automatically. If Atlas closes unexpectedly, it saves a crash report on your device, in the Atlas\Crashes folder under your local application data. You can open that folder or delete its contents at any time.
Only if you choose Send Crash Report does Atlas send the last crash's error text to atlasnative.com: the error message, when it occurred, the source location and internal Atlas thread where it occurred, the symbolized call stack, the Atlas version and the operating system and processor type. Before sending, Atlas replaces your user folder path and account name with placeholders. The memory dump saved with the report never leaves your device, and no files, file contents or folder listings are sent. Cloudflare receives the request with ordinary network information; we do not store your IP address with the report, only the country Cloudflare derives from it.
We use crash reports only to find and fix defects in Atlas. They are stored in Cloudflare D1 and deleted automatically after 180 days. When a new kind of crash arrives, a notification with the same report text is posted to a private Discord channel used by the Atlas team; Discord retains those messages under its own policy until we delete them. To ask us to delete a report you sent, contact us with the approximate time you sent it.
If you send a screenshot, log, file or support request yourself, we process what you send to help resolve that request. Please remove unrelated personal information before sending support material.
5. Website analytics and your choices
The website uses Cloudflare for hosting, security and delivery. We use OpenPanel to measure page visits and interactions such as opening pricing, requesting access and starting checkout, and, only if you choose Allow all analytics, PostHog for product analytics and session replays. Depending on the provider, technical data can include IP address, browser and operating-system information, referring page, page URL, event time and a browser/device identifier. We do not describe this information as necessarily anonymous.
OpenPanel measurement is on by default. It does not set cookies and we use it only to understand website use. PostHog analytics and session replays are disabled until you choose Allow all analytics. Choose Anonymous only to keep PostHog off, and change your choice at any time using Privacy choices in the footer. We honor Global Privacy Control and Do Not Track by keeping all optional analytics, including OpenPanel, disabled. The PostHog preference is stored locally in your browser. Essential security, checkout and email-confirmation requests still operate when analytics are disabled.
If you allow PostHog, session replays mask all form inputs and text marked as sensitive; form autocapture and automatic exception capture stay disabled. We do not intentionally send email addresses, payment-card data, file contents, confirmation tokens or private-folder passwords to analytics. Confirmation, unsubscribe and checkout pages do not initialize any website analytics.
We retain website analytics only for the measurement and troubleshooting purposes described here. The applicable retention period depends on the provider's project settings and legal requirements. Contact support@modhyt.org for information about the current period or a deletion request. You can block analytics scripts in your browser.
6. Email updates and abuse prevention
If you request email updates, we process your email address, subscription preferences, consent wording and version, request date, and confirmation or unsubscribe dates. The subscription requires an explicit checkbox and email confirmation. Each marketing email includes an unsubscribe link.
Cloudflare Turnstile helps prevent abuse, Cloudflare D1 stores subscription records and hashed confirmation tokens, and Resend delivers requested confirmation messages and updates. These services may process data outside your country. Turnstile and hosting services can process IP addresses and browser information for security.
Unconfirmed subscription requests are deleted after seven days. Confirmed subscriptions are kept while active. After unsubscribe, we retain only the information needed to suppress further marketing and record the withdrawal of consent, subject to any applicable legal obligations. Short-lived rate-limit counters use a keyed daily hash of the IP address; raw IP addresses are not stored in subscription records.
7. Purchases, licenses and support
Website purchases are handled through Polar. Polar and its payment processors handle checkout, billing, tax and payment information under their own terms and privacy notices. Atlas may receive the buyer's email, product and order identifiers, purchase/refund status and information needed to deliver the purchased entitlement and provide support. Atlas does not receive your full payment-card number through its website checkout.
Purchases through Microsoft Store are processed by Microsoft under its terms and privacy policy. The entitlement, price and refund route for a Store purchase are those shown in the Store offer. An external website purchase is a separate transaction.
We keep purchase and support records for fulfillment, refunds, fraud prevention, accounting and applicable legal obligations. Requests to delete data may be limited where records must be retained by law. We do not sell your personal information or use it for cross-site behavioral advertising.
8. Purposes, security and international processing
We process information to provide the actions and communications you request, fulfill purchases, maintain security, resolve support issues, meet legal duties and, with your choice, understand website use. Where applicable, the legal bases include contract performance, consent, legal obligations and legitimate interests in service security and support.
We use HTTPS for Atlas-operated network services and access controls for service data. Local files remain subject to your Windows account permissions and device security. No storage or transmission method is risk-free. Providers may process information in Mexico, the United States or other countries; protections and available rights may differ. We use appropriate contractual safeguards where required.
9. Access, deletion and other rights
Depending on your location, you may request access, correction, deletion, portability or restriction of processing, object to processing, or withdraw consent. In Mexico these include rights of access, rectification, cancellation and opposition (ARCO). Email support@modhyt.org, describe the request and identify the email address or order involved. We may ask for proportionate information to verify your identity. You may also contact the competent data-protection authority.
You control local files and Atlas settings on your device. Uninstalling an application may leave user-created files, encrypted containers, downloaded tools, configuration folders or logs. Remove those separately only after backing up anything you want to keep. Disconnecting a remote account does not delete copies already stored by its provider.
Atlas is a general-purpose file utility and is not directed at children under 13. If you believe a child has supplied personal information to our website without the required authorization, contact us so we can investigate and remove it where appropriate.
10. Changes and service-provider notices
We update this policy when the product or its data practices change. The date above identifies this version. Material changes requiring new consent will not rely on an earlier consent.