Neophron Your cloud deserves
a clear explanation.
Understand what Neophron Drive can access, what happens to your files, and how to leave.
Start with limited access.
Saving an internet link to Google Drive requests per-file access. It covers files created by or explicitly shared with Neophron Drive, including the ability to read, edit and delete those files. It does not request access to browse every file in your Drive.
Optional source-Drive browsing is broader: Google grants read and download access to all files available to that account. The interface copies only your selected files. You do not need this permission to save a normal internet download. When selected-file mode is enabled, Google Picker shares only explicitly chosen files using drive.file instead. That narrower permission can read, edit and delete the shared files; Neophron Drive’s source-copy flow only reads them. Old broader grants must be revoked separately.
OneDrive personal and Dropbox use app-folder access: Neophron Drive can create, read, edit and delete files only inside its own app folder (its own app folder in Apps), plus see the account’s name and email to label the connection. Neither connection can browse the rest of your OneDrive or Dropbox. Each provider stays unavailable until operator setup and live testing are complete. Disconnecting Dropbox also revokes Neophron Drive’s Dropbox access automatically.
What “encrypted” means here.
The website and cloud API connections use HTTPS. Stored authorization tokens and private transfer checkpoints are encrypted with a server-held key. The server can decrypt them to run your transfers.
File contents pass through the worker’s memory. Neophron Drive does not intentionally keep a permanent copy of the transferred file on its server. Your cloud keeps the delivered copy.
This is not end-to-end encryption or zero-knowledge storage. Neophron Drive’s server processes readable file bytes. A source URL using HTTP also has an unencrypted source connection; prefer HTTPS download links.
Privacy Policy: what the service stores
Operator and support details are being prepared for public launch.
| Information | Purpose and retention |
|---|---|
| Account email, optional name and login identities | Identify your account. Passwords, when used, are stored as hashes. Account records remain until deletion. |
| Cloud account details and encrypted authorization tokens | Run transfers you request. Disconnect removes the saved connection credentials from the active application database. |
| Source links, file names, sizes, progress and cloud file IDs | Run, resume and show your transfer history. Private source links and upload checkpoints are encrypted; names and progress are ordinary account records. Transfer history has no automatic expiry yet. |
| Browser extension (optional) | Only when you choose Send to my cloud, the extension opens Neophron Drive with that download’s web address, and it is then handled like any link you paste (see the source links row above). Choosing Save to this PC sends nothing. Its settings stay in your browser. Details below. |
| Sessions, email challenges and security activity | Protect account access. Sessions expire after 12 hours of inactivity or 14 days at most. Email codes expire in 10 minutes; security activity is kept for up to 90 days. |
| Passkeys | Credential IDs, public keys, names and last-use times protect sign-in. We do not receive your fingerprint, face data or the passkey private key. |
| Billing references and receipts | Subscription IDs, verified payment references, amounts and periods maintain paid allowances. The payment provider identified at checkout handles card details and may retain billing records under its own requirements. Neophron Drive does not store card details. |
| Anti-abuse checks | Rate-limit subjects are hashed. When enabled, Cloudflare Turnstile processes a verification token and connection IP to assess abuse. Brevo processes the email address and verification message when sending account codes. |
Hosting, database and cloud providers process data needed to deliver the service. Operational logs and recovery backups can outlive deletion from the active database; Neophron Drive does not promise immediate erasure from provider backups.
Browser extension
The optional Chrome and Edge extension asks, for each download you start, whether to save it to this PC or send it to your cloud.
- What it can see. The web address, file name and size of a download you have just started, so it can pause it and ask. It cannot read the pages you visit, your browsing history, cookies, passwords or the contents of your files.
- What it sends. Nothing, unless you choose Send to my cloud (or use the right-click menu on a link). Then it opens your Neophron Drive website with that download’s web address, and Neophron Drive stores it as one of your transfer links. Download addresses are not sold or shared, and are used only to run the transfer you asked for.
- What it keeps on your device. Your settings (when to ask, the minimum size, sites you chose to always save to this PC) and your Neophron Drive address, in the browser’s extension storage. Open prompts and a two-minute memory of links just sent to the cloud are held in memory until you close the browser.
- What it ignores. Private (Incognito) windows, downloads started by other extensions, files made by a web page itself, and downloads from the Neophron Drive website.
- What it does not contain. Analytics, advertising, tracking or code loaded from the internet.
-
Remove it. Remove the extension on
chrome://extensionsoredge://extensions; that deletes its settings from your browser.
The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Disconnect here. Revoke there.
- Open Connections and disconnect the account. Neophron Drive removes its stored credentials and stops unfinished transfers using that connection. An upload request already in flight may finish.
- Remove Neophron Drive in your provider’s account settings. This revokes the provider permission as well. Removing Google access can affect other Neophron Drive grants for the same Google account, including source access or sign-in.
- Your saved cloud files stay yours. Disconnecting does not delete files already delivered to your cloud.
Account deletion and beta limits
My account contains a deletion flow that removes your profile, saved connections, transfer history and personal usage records after email confirmation. It is available only when the service’s email delivery is configured. Cloud files remain in your provider’s account. Until email delivery is ready, you can still disconnect clouds and revoke their permissions directly.
Neophron Drive is an invite-only beta. This page describes implemented controls; it is not a claim of independent security certification. If you prefer, try the service with a separate cloud account containing only files you intend to transfer.
Open My account →