# Where Your Files Live, and Who Can Read Them

On Folder your files are in Cloudflare storage in the EU; in your own Cloudflare they never pass through us. Sign in with Apple, device keys, share links.

A folder lives in one of two places, and who opens it is always your pick.

## On Folder

Your Mac (and the iPhone app, coming soon) reaches Folder over HTTPS. The files are in Cloudflare storage in the EU, in our account: 5 GB free, every change kept. Delete Account on the web deletes your account and every file you keep on Folder.

## In Your Cloudflare

Your files never pass through us: they are in your own R2 buckets, on your account and your bill, about $0.015 a GB a month after 10 GB free, with no egress fees. A few folder-* workers add versions, share links and invites. Keys are checked inside your account, so the folder works even if folder.dev is down. Uninstall removes every trace.

## Who Can Get In

- Sign in with Apple: no password to make up or forget. The same sign-in on the Mac and the web, and in the iPhone app when it comes.
- A key inside each device: each Mac signs its requests with its own key, kept in its Secure Enclave, so a token copied off it opens nothing in your Cloudflare. Remove one in Settings and it is out of every folder.
- Every change kept: every overwrite and every delete, with who made it. Put any version back from Finder or the web.
- Share links: one choice per file. Only a link nothing else protects carries a random id, so it can't be guessed. It ends on a date you pick, or never; Revoke turns it off. Share links work for a folder in your Cloudflare; a folder on Folder opens only for you.
- ChatGPT and Claude: only on the folders you tick. They never delete or move a file, and each change is a version you can put back. Disconnect in Settings › Connected Apps.

## Not End-to-End Encrypted, and Why

Files are encrypted on the way and at rest, but not end to end: on Folder they sit in our Cloudflare account, where we could open them, and in your Cloudflare they sit in your account, not ours. Locking files to your devices would switch off ChatGPT and Claude and change how share links and the web work, and losing every device would lose the files, so it is designed, recovery key first, and not in 1.0.

Questions about your files? Write to folder@tinysend.com.

Source: https://folder.dev/security