Effective date: July 14, 2026
Compare Files is built around a single principle: the tool works entirely in your browser. There is no server that receives, processes, or stores your file data. Not because we promise not to look — but because we architecturally cannot.
Compare Files is operated by Orbit Phase (orbit-phase.com), which is the data controller responsible for the limited account data described below.
To let you sign in and verify your purchase, a small amount of account data is stored in our database (Cloudflare D1). We never store anything from the files you compare.
| Data | Where stored | Why |
|---|---|---|
| Email address From your Google account, or the address you use for email sign-in | Cloudflare D1 (our database) | To identify your account across sign-ins, send login codes, and link your purchase to you |
| Google account ID An opaque numeric identifier from Google — only when you sign in with Google | Cloudflare D1 (our database) | To recognize your Google sign-in and keep it linked to the same account |
| Subscription / purchase status A flag and a Stripe customer reference | Cloudflare D1 & Stripe | To grant paid access, verify purchases, and issue refunds |
That's the whole picture: an email, an identifier or two, and whether you have a valid purchase. We store no file content, no comparison data, and no browsing history.
If you choose to sign in with Google, we use Google OAuth and request only the openid and email scopes. This gives us a stable account identifier and your email address, so we can recognize you and link your account to any purchase. We do not request access to your name, profile photo, contacts, calendar, files, or any other Google data.
Google's own privacy practices apply to the sign-in step. You can review them at policies.google.com/privacy.
You can also sign in without Google by entering your email address. We email you a temporary 6-digit code; entering it signs you in. No password is ever created or stored. We store your email address to identify your account, and only a short-lived, hashed copy of each login code (never the code itself), which expires within minutes.
Login-code emails are delivered by Resend, our email provider, which processes your email address solely to deliver that message.
If you sign in with both Google and email using the same address, they resolve to a single account.
Payments are handled by Stripe. Your card number and billing details go directly to them — we never see or store payment card information. Stripe is PCI-DSS compliant. We store a Stripe customer reference so we can verify your subscription and process refunds.
The app is hosted on Cloudflare Pages and our authentication worker runs on Cloudflare Workers, with account data in Cloudflare D1. Cloudflare may log standard CDN metadata (request timestamps, country-level location, response codes) as part of their infrastructure operation. This is governed by Cloudflare's privacy policy. We do not have access to this data at the individual request level.
After you sign in, we store a session token in your browser's localStorage so you stay signed in between visits. It expires automatically and is removed when you sign out. We do not set any third-party cookies or persistent tracking cookies.
Your account record (email, identifier, and purchase status) is stored for as long as you keep an account so you retain access. Login codes are discarded within minutes of being issued. If you want your account data deleted, email us and we'll remove it within 7 days — you'll lose app access but can request a refund if within the 14-day window.
You can request deletion of any data we hold about you at any time. Because we hold almost nothing, this is straightforward. Email [email protected].
If you are in the EU or UK, you have rights under GDPR / UK GDPR including access, rectification, erasure, and portability. We will respond within 30 days.
The Service is not directed at children under 13. We do not knowingly collect data from children.
If we make material changes, we'll update the effective date at the top and note it in the app. Our core commitment — files never leave your device — will not change.
Questions about privacy? Email [email protected]. We'll respond within 2 business days.
See also: Terms of Service
Tools for every profession
Compare all file types →Compare
By profession
Company