Last updated: June 2026
R2 File Manager does not collect, store or transmit any personal data to any server operated by us. The application runs entirely on your local machine.
Your Cloudflare R2 credentials (Account ID, Access Key ID, Secret Access Key) are stored locally on your PC in a file protected by OS-level encryption (Windows DPAPI), which ties the data to your Windows user account. No password is required at startup. They are never sent to any server other than Cloudflare's own R2 API endpoint.
When you use the Export function, the resulting .r2buckets file is encrypted with AES-256-GCM using a password of your choice, so it can be safely stored or transferred between machines.
The only outbound network requests made by R2 File Manager are:
This website (www.r2filemanager.com) uses Google Analytics 4, a service provided by Google, to collect anonymous and aggregated statistics about visits, such as pages viewed, approximate location (country level) and device type. This helps us understand how the site is used and improve it.
Analytics cookies are only set after you accept them through the cookie banner. Until you make a choice, Google Consent Mode keeps analytics storage disabled. You can change or withdraw your consent at any time via the "Cookie settings" link in the footer.
Google processes this data on our behalf as a data processor. We do not use advertising cookies and we do not sell or share your data for advertising. For details on how Google handles data, see Google's Privacy Policy.
Important: this analytics applies only to the website. The R2 File Manager desktop application itself contains no analytics, tracking or telemetry.
R2 File Manager interacts only with Cloudflare R2 on your behalf. Please refer to Cloudflare's privacy policy for how they handle data.
If you have questions about this privacy policy, you can reach us via the GitHub repository.