Privacy Policy

Sher2 is committed to protecting user privacy through minimal data collection by design. We believe that distributing digital content should not require intrusive personal tracking. For anonymous visitors and uploaders, we do not require account registration or collect real-world identities. For registered creators, we collect only the necessary credentials and payment routing details required to administer accounts and fulfill earnings payouts.

We collect information in the following categories: • Creator Account Details: When you register for the Creator Hub, we collect your name/handle, email address, and an Argon2id-hashed representation of your password. • Traffic Telemetry & Fraud Prevention: When accessing files, video streams, shortlinks, pastes, or social groups, our edge network records anonymized IP hashes, request timestamps, referring domains, and browser user-agents solely to detect artificial bot traffic, verify unique visits, and calculate CPM monetization. • Financial Payout Data: To process withdrawal disbursements, we store the payment account details you provide (such as bank account numbers, e-wallet identifiers, or cryptocurrency wallet addresses).

We use collected data strictly for operational, security, and financial purposes: • To deliver and buffer files, streams, pastes, and group portals seamlessly across edge nodes. • To prevent fraud, abuse, DDoS attacks, and synthetic bot traffic. • To calculate and credit earnings to creator balances with atomic mathematical accuracy. • To comply with statutory legal requirements and assist in genuine law enforcement investigations involving serious offenses.

Sher2 does NOT use invasive third-party cross-site behavioral tracking cookies. Our platform utilizes: • httpOnly Cookies: Used exclusively to maintain authenticated creator sessions (`access_token` and `refresh_token`). These cookies cannot be read by JavaScript, protecting against XSS attacks. • CSRF Tokens: Double-submit cookies to safeguard all form mutations against cross-site request forgery. • Local Storage: Used solely to persist client preferences such as dark/light interface theme selection.

We employ robust, modern security safeguards: • Encryption in Transit: All platform communications are enforced over TLS 1.3 encryption. • Secret Hashing: Passwords are encrypted with Argon2id, and API Personal Access Tokens (PAT) are stored as SHA-256 hashes. • Retention Schedules: Temporary traffic telemetry logs are automatically truncated and rotated on regular cycles.

We work with trusted infrastructure providers: • Cloudflare Turnstile: For privacy-preserving CAPTCHA and anti-bot verification. • Advertising Networks: Display ads served on share gateway pages may use their own cookies according to their independent privacy policies. Sher2 never sells or discloses your personal identifiable information (PII) to ad brokers.

Depending on your geographic location, you possess statutory privacy rights including: • The right to access and receive a copy of your personal data. • The right to correct inaccurate account credentials. • The right to request permanent account deletion (right to erasure). To exercise any of these rights, you may submit a request through the Creator Hub settings or email our Data Protection team at [email protected].