Private by architecture, not by promise.

How SoraFiles handles your data — written to match exactly how the app behaves. Last reviewed: 2026.

Local file processing

Image, HEIC, PDF, ZIP, and DOCX tools process selected files inside this browser. File contents and results are not uploaded to a SoraFiles processing server.

Temporary browser data

Previews and download URLs exist temporarily in the open page and are released when a file is removed or the page is closed.

Analytics

Ahrefs Web Analytics and Google Analytics may process page activity, device information, and approximate location, but not the contents of files processed locally. Their scripts load asynchronously and do not receive file contents. Neither runs on license checkout-return pages.

Contact form

Your name, email address, subject, message, and optional attachment are sent through FormSubmit for delivery to SoraFiles support. Do not attach confidential files.

Public source and contributions

The SoraFiles application source is published at github.com/Sora-Labs2026/SoraFiles under the GNU Affero General Public License v3.0. Local file processing does not send selected files to GitHub. Information or attachments that you voluntarily post in a public GitHub issue, discussion, or pull request are publicly visible, so do not submit confidential files or personal data there.

Anonymous tool-usage ranking

After a tool successfully finishes, SoraFiles sends only the tool identifier and a success event to first-party Cloudflare storage. Daily totals are used to rank Popular Tools. File names, sizes, contents, outputs, IP addresses, user-agent strings, and persistent user identifiers are never stored in this dataset. Daily counts older than 120 days are deleted.