Radio Diabolus Share is a file transfer service operated by Radio Diabolus. The following explains which data is processed when you use it.
1. Data controller
Radio Diabolus
Radio Diabolus is a part of the A & V Streaming Service Ltd.
Tagliaferra Business Center
14 High Street
Sliema SLM1551
E-Mail: webmaster@radio-diabolus.eu
2. Use and technical operation
When block uploads are interrupted, encrypted temporary upload blocks are stored with a temporary session identifier. Unfinished transfers are cleaned up automatically. When this service is accessed, the server processes technically necessary connection data, in particular the IP address, time and requested resource. The hosting provider may also create server logs. Their retention period depends on the actual hosting setup.
3. File transfers
For a transfer, the service processes selected files, filenames, file sizes, creation and expiration times, download counters, optional messages, sender and recipient details, and technical transfer identifiers. Uploaded file contents are stored encrypted. This is server-side encryption; the operator technically has access to the necessary server key. Optional share passwords are stored as password hashes.
Share links can be forwarded. Anyone who has the link and, where required, the password can access the files within the configured limits. After expiration or reaching the download limit, files are blocked from further downloads and removed through automatic storage cleanup.
4. Email notifications
When email delivery is enabled, the provided recipient address is used to send the share link. Necessary message information is sent to the configured mail server. For guest uploads, the sender address is verified through a confirmation link. Only then is the recipient link activated. Messages do not contain tracking pixels or images loaded from third-party servers.
5. Security and abuse prevention
To detect abuse, security-related events such as uploads, downloads and failed logins are recorded, including IP addresses, timestamps, event IDs and, where applicable, transfer metadata. Confidential logs are stored encrypted by the application. The configured retention period is 14 days. Deletion is performed by automatic cleanup.
File requests, contacts and feedback
For file requests, the title, description, creation and expiry times and linked transfer are stored. Requests can be used once. Personal address book contacts store name, email address and an optional group until deleted. When transfer feedback is enabled, the supplied name, message and timestamp are stored and visible to holders of the transfer link. Expired requests are purged after 30 more days. Contacts remain until manually deleted.
Optional expiry reminders are sent to the stored sender address, verified for guest uploads. Media previews require access checks and are only available for transfers without a download limit.
6. User accounts and cookies
For registered users and administrators, usernames, email addresses (for user accounts), and password hashes are stored. A technically necessary session cookie is used for login, sessions and form protection. The application uses no advertising cookies or external analytics tools on this website.
7. Purposes and legal bases
Processing for requested file transfers and user administration, where applicable, is based on Article 6(1)(b) GDPR for contractual or pre-contractual measures. For technically necessary operation, attack prevention and abuse protection, Article 6(1)(f) GDPR may apply following a legitimate interests assessment. The precise legal basis depends on the actual operator and terms of use.
8. Retention and recipients
Shares are cleaned up when they expire or reach their download limit. Security logs follow the separately configured retention period. User accounts and administration data remain until deleted, unless other retention requirements apply. Technical data may be processed by hosting and email providers.
Web hosting: Die konkret verantwortliche Hostinggesellschaft ist noch im Adminbereich einzutragen.
9. Rights of data subjects
Subject to statutory requirements, individuals may have rights to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a competent data protection authority. Requests can be directed to the controller named in section 1.
10. Security advice
Do not send files you are not authorized to share. Send passwords for sensitive shares to recipients through a separate communication channel. Email contents are not automatically end-to-end encrypted.
Last updated: October 2026. This policy must be checked and completed for the actual hosting setup, email service and operator details.