Privacy Policy

Last updated: June 3, 2025

1. What is Sipliy Folder VPS?

Sipliy Folder VPS is a self-hosted download manager consisting of a Node.js server application and a companion browser extension. You install and run this software on your own VPS (Virtual Private Server). We do not operate any shared servers or cloud services on your behalf.

2. Data We Do Not Collect

Because this is self-hosted software, we (the developers) collect no data whatsoever. Specifically:

• No usage analytics or telemetry
• No crash reports sent to external servers
• No account information shared with third parties
• No download history or file metadata sent anywhere

3. Data Stored on Your Server

The following data is stored only on your own VPS, under your full control:

• Account credentials — usernames and bcrypt-hashed passwords in a local JSON file
• Session tokens — stored in memory or on disk, used to keep you logged in
• Download history — URLs you submitted and job status, stored locally
• Files — files downloaded to your VPS are stored in your designated downloads folder
• Extension settings — server URL and bearer token, stored in chrome.storage.sync (synced via your own Google account, subject to Google's privacy policy)

4. Browser Extension — Permissions

The Sipliy Folder VPS browser extension requests the following permissions:

• contextMenus — to add a "Download to VPS" right-click menu item
• storage — to save your server URL, token, and preferences locally
• notifications — to show download completion notifications
• downloads — to download completed files from your VPS to your PC
• cookies — to read YouTube authentication cookies and pass them to your VPS server, enabling yt-dlp to download age-restricted or member-only videos on your behalf. Cookies are sent only to your own VPS server and nowhere else.
• alarms — to periodically refresh the download status badge

The extension communicates exclusively with the server URL you configure. No data is sent to any other destination.

5. Third-Party Services

The server application uses yt-dlp to download media from platforms such as YouTube. When you request a download, your VPS sends a network request to the target platform directly. This is subject to that platform's own terms of service and privacy policy.

The landing page loads fonts from Google Fonts. This request is made by your browser directly to Google's servers and is subject to Google's Privacy Policy.

6. Data Retention & Deletion

Since all data lives on your own server, you have complete control over retention and deletion. You can delete accounts, download history, and files at any time through the application interface or directly on the server filesystem.

7. Children's Privacy

This software is not directed at children under 13. We do not knowingly collect any information from children.

8. Changes to This Policy

We may update this Privacy Policy occasionally. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the software after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy, you can open an issue on the project repository or contact the developer directly.