What Sunfile keeps, and for how long.

Updated October 17, 2026: the public reading pages now show one banner ad (see Advertising).

The writer

What you type into the request writer, including your name and reply address, is used to build the letter on the page and is not saved. The letter is not saved either.

Request Files

A Request File keeps what you put in it: the office, what you asked for, dates, how you sent it, their reference number, the log and your notes. It never asks for your name, email or address. The file’s link is its only key: Sunfile stores only a one-way hash of it, so the link cannot be recovered or sent to you again, and anyone you share it with can see and change the file.

Files that nobody opens for 400 days are deleted automatically, with everything in them. You can delete a request, or the whole file, at any time from the file itself.

Backups

The database is copied to a backup on the same server every night, and before and after each software update; the 14 newest database copies are kept (about two weeks of nightly copies, a little less after an update adds one) and update copies for the last 10 updates. A deleted file can stay in those copies until they age out. WeldonPC’s own server backups may also hold copies for a limited time.

Addresses and cookies

To limit abuse, Sunfile counts how many files and changes come from one internet address each day; the address is stored only as a salted one-way hash, and the counts are deleted after two days. Pages with a form set one security cookie (a CSRF token) that is needed to send the form. There are no tracking cookies and no analytics services; the only outside service any page loads is the banner from adengine.us on the public reading pages, described under Advertising, which also counts one page view per page as a daily total. The web server keeps standard access logs.

Advertising

The public reading pages of Sunfile (the home page, The rules, If it stalls, Pricing and About) show one banner ad from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind this site. For now the ads are for WeldonPC’s own services. The banner sits below the page’s content. The request writer and its letter, Request Files (every page, letter, calendar file and printout), this page, the terms and error pages show no ad, so nothing you type there is ever near an ad.

To show an ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your internet address, your browser type and the address of this site with those requests.

• No cookies, no profile. AdEngine sets no cookies, gives you no ID and does not track you from site to site.
• How your internet address is used. adengine.us looks up the approximate city for your address in a location database kept on its own server (nothing is sent to anyone else), so that ads meant for one area are shown only there. It also uses the address to count each ad view or click only once and to leave out robots and WeldonPC’s own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
• What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (internet address, time, address requested, referring site, browser) for security; it is deleted on a rolling schedule.
• Clicking an ad passes through adengine.us, which counts the click, and then opens the advertiser’s site, which has its own privacy policy.
• Nothing about you is sold or shared.

Payments

During the preview there are no payments. When they open, PayPal will handle them; Sunfile will store only the PayPal subscription reference needed to keep the Pass on, never card details.

Questions

Write to WeldonPC through weldonpc.com.