Privacy Policy

Last updated: June 2026

What data does R2 File Manager collect?

R2 File Manager does not collect, store or transmit any personal data to any server operated by us. The application runs entirely on your local machine.

Credentials and API keys

Your Cloudflare R2 credentials (Account ID, Access Key ID, Secret Access Key) are stored locally on your PC in a file protected by OS-level encryption (Windows DPAPI), which ties the data to your Windows user account. No password is required at startup. They are never sent to any server other than Cloudflare's own R2 API endpoint.

When you use the Export function, the resulting .r2buckets file is encrypted with AES-256-GCM using a password of your choice, so it can be safely stored or transferred between machines.

Network traffic

The only outbound network requests made by R2 File Manager are:

Direct API calls to your Cloudflare R2 bucket endpoint to perform file operations you initiate.
Optional version-check requests to fetch the latest release information (no personal data is sent).

This website

This website does not use cookies or third-party analytics trackers.

Third-party services

R2 File Manager interacts only with Cloudflare R2 on your behalf. Please refer to Cloudflare's privacy policy for how they handle data.

Contact

If you have questions about this privacy policy, you can reach us via the GitHub repository.