FileFast processes only data required to provide a transfer the user requests. This can include the account email and authentication codes, explicitly selected file names, metadata and file bytes, recipient email addresses, transfer title and message, and the completed FileFast link.

Data is sent only to FileFast APIs at https://file.fast and FileFast-authorized object storage. A completed link is inserted into Gmail only when the user explicitly selects Insert in Gmail. The extension does not read the user's inbox, contacts or browsing history, never sends Gmail messages, and does not sell data or use it for advertising.

Authentication and MFA codes are not stored. The signed-in session and short-lived resumable upload checkpoints are stored in restricted extension storage until sign-out or revocation. Selected file bytes are not copied into extension storage.

Full FileFast Privacy Policy: https://file.fast/privacy