Privacy Policy

Updated October 21, 2026

ViewMock lets you share one static image through a preview link without a visitor account. This policy explains the data used to provide that service and the advertising preparation.

Images and links

We receive the selected file, its declared filename and type, and the information needed to validate and store it. Accepted files keep their original bytes, including embedded metadata. Files are held in private server storage; access goes through the application. An unprotected link can be opened by anyone who has it. A password-protected link also requires its password. Recipients can save or share an image they can view. ViewMock is not end-to-end encrypted.

Current defaults are a maximum of 30 days after activation and deletion after 15 days without a qualifying preview, whichever comes first. Each upload keeps the limits agreed when created; later setting changes do not extend existing links. A completed, visible qualifying preview can renew inactivity up to the fixed maximum. Administrators can delete uploads. Access ends when expiry or deletion is enforced; physical cleanup is queued and retried if storage is temporarily unavailable.

Sessions, passwords and security

A first-party, HttpOnly browser-session cookie lasts up to 30 days. It supports secure uploads, recovery and access checks. A password unlock grant lasts up to 12 hours, capped by link expiry. Viewer passwords are stored as password hashes. A temporary sessionStorage entry identifies only the current upload for recovery; ViewMock does not keep a recent-link list. Filenames and upload-session authority are cleared after the 24-hour recovery window by scheduled cleanup.

Security controls process network addresses and keep keyed hashes for rate limits. Application diagnostics record request IDs, route patterns, status and durations, rather than image contents, passwords or complete preview URLs. The hosting and monitoring providers also process network requests to operate and protect the service.

Private analytics and operational counts

Umami Cloud measures eligible visits to the homepage, About, Privacy and public guide pages. It estimates visitors, pageviews, referring sites, countries, devices, browsers and approved campaign sources. It also records image selection, upload start, server-confirmed link creation, categorized upload failure and successful link copying. These estimates can differ from backend totals because browser blocking, privacy choices, network failures and quotas can prevent measurement.

ViewMock sends only fixed public page paths and titles, selected public referrer origins, allowlisted campaign labels and optional coarse image format/size/error categories. It does not send images, filenames, private preview links or tokens, passwords, form contents, credentials or email addresses. A sandbox isolates the analytics script from the uploader. Shared previews, password entry, legacy private confirmation URLs and administrator pages do not load the tracker. No session recording, heatmaps, analytics cookies or persistent user identification are enabled.

Umami receives ordinary network metadata to deliver its service and derive anonymous country/device/browser statistics and short-lived visitor/session estimates. ViewMock does not send an IP address or use it as a verified person identifier. Umami describes its processing in its privacy policy. Cloud reporting is private and retained for six months on the Hobby plan. Do Not Track and Global Privacy Control signals disable collection; blocking the tracker does not affect uploads or previews. Known automated traffic and reliably identified administrators/designated review browsers are excluded. These exclusions cannot identify an operator using another browser or the separate information origin without that signal.

Legacy homepage/upload traffic collection has ended. Retained historical aggregates remain privately readable. Completed qualifying-preview counts remain first-party and are never sent to Umami. Receipt acknowledgements still enforce inactivity independently. Legacy browser/deduplication records retain up to 35 UTC date buckets; anonymous daily totals retain 366 and survive image deletion. No daily unique totals are added together to claim unique people across a longer window.

Retention and service providers

Terminal upload metadata is cleaned after 30 days once file deletion is complete. Expired sessions and grants are removed by scheduled cleanup. Operational logs retain 14 days; job and audit records retain 90 days. Encrypted database backups retain seven days and may temporarily contain metadata no longer in the live database. They exclude original images. A supported restore quarantines links rather than republishing them. Cleanup can be delayed by failures and is monitored.

ViewMock currently uses OVHcloud hosting in Canada, Cloudflare R2 for encrypted off-host database backups, Resend for private operational notifications and UptimeRobot for availability monitoring. No visitor mailing list or marketing email collection is provided. These providers process data necessary to deliver their services; data may be processed in countries other than yours.

Advertising and choices

Advertising is being prepared. It stays off until account/site approval, real configuration and consent checks are complete. The upload application, image previews, password entry, administrator pages, upload progress, confirmation, errors and this policy never load advertising code.

If enabled, one Google AdSense unit appears only on the About page at info.viewmock.com. The guides remain free of advertising and consent scripts. It receives no selected image, filename, password, private preview URL, session credential or private operator configuration from ViewMock. Google and its partners may use cookies, web beacons, network addresses and device information to serve and measure ads, including ads based on earlier visits to this or other sites. The consent message identifies applicable vendors and choices. No ad is requested by this integration without an affirmative supported consent signal; declining, withdrawing or blocking consent keeps ads off. Non-personalized ads are not treated as exempt from consent.

Use “Privacy choices” on the informational page to revisit consent when advertising is enabled. You can also use Google My Ad Center, read Google's partner-site data explanation, or review participating vendors' opt-out options. These external pages have their own policies. Clearing browser data removes your local session and may require you to unlock links again; it does not delete an uploaded image. Do not upload images you lack permission to share or information you do not want recipients to retain.