Privacy Policy for Cotton Cloud
Effective date: June 16, 2026
Cotton Cloud is a mobile client for connecting to a Cotton Cloud server. Cotton Cloud is designed for self-hosted or user-selected cloud storage. This Privacy Policy explains how the Cotton Cloud Android app handles information.
Summary
The Cotton Cloud Android app does not show ads.
The Cotton Cloud Android app does not use third-party advertising SDKs.
The Cotton Cloud Android app does not currently use third-party analytics, crash reporting, tracking, or telemetry SDKs.
The app connects to the Cotton Cloud server selected by the user. Data sent to that server is controlled by the server operator.
Information stored on your device
The app may store information locally on your device, including:
- the Cotton Cloud server URL you choose to connect to;
- authentication and session information used to keep you signed in;
- basic app settings and local app state.
Authentication and session information is intended to be stored using secure storage features provided by the operating system.
You can remove locally stored app data by logging out, clearing the app's data in Android settings, or uninstalling the app.
Information sent to a Cotton Cloud server
When you use the app, it communicates with the Cotton Cloud server you choose. Depending on the server and features you use, the app may send or receive:
- authentication requests;
- session refresh requests;
- account or profile information returned by the server;
- file and folder metadata;
- file content that you choose to upload, download, open, or manage;
- technical request information needed for the app and server to function.
The app does not choose a server for you without user action. The server may be operated by you, your organization, Cotton Cloud, or another server administrator.
Cotton Cloud does not control servers operated by third parties. The privacy and security practices of each self-hosted or third-party server are the responsibility of that server operator.
How information is used
Information handled by the app is used to:
- connect the app to the Cotton Cloud server selected by the user;
- authenticate the user;
- keep the user signed in;
- display account, file, folder, and storage information;
- upload, download, browse, and manage files;
- maintain the security, reliability, and functionality of the app.
Sharing of information
The Cotton Cloud Android app does not sell personal information.
The Cotton Cloud Android app does not share personal information with advertisers.
The app sends information only to the Cotton Cloud server selected by the user, as needed for the app to function.
Information may also be processed when required for security, troubleshooting requested by the user, legal compliance, or operation of a Cotton Cloud server controlled by the user or the applicable server operator.
Analytics, ads, crash reporting, and telemetry
The current version of the Cotton Cloud Android app does not use third-party analytics, advertising, crash reporting, tracking, or telemetry SDKs.
If future versions add analytics, crash reporting, telemetry, push notifications, or similar services, this Privacy Policy will be updated to describe what information is collected, how it is used, and which service providers are involved.
Push notifications
The current version of the Cotton Cloud Android app does not use push notifications.
If push notifications are added in a future version, this Privacy Policy will be updated before or at the time that feature is released.
Data security
The app is designed to use secure network connections when communicating with Cotton Cloud servers.
Authentication and session information is intended to be stored using secure storage features provided by the device operating system.
Users should only connect the app to Cotton Cloud servers they trust.
Data retention and deletion
Information stored locally by the app remains on the device until the user logs out, clears the app's data, or uninstalls the app.
Information stored on a Cotton Cloud server is controlled by that server and its administrator. To delete files, account data, or other server-side data, users should use the deletion features provided by their Cotton Cloud server or contact the server operator.
If Cotton Cloud operates a demo, testing, or hosted server, users may contact Cotton Cloud to request deletion of data associated with that server, where applicable.
Children
Cotton Cloud is not intended for children under 13. The app is intended for users who manage or access a Cotton Cloud storage server.
Changes to this Privacy Policy
This Privacy Policy may be updated from time to time. When changes are made, the effective date above will be updated.
Contact
For privacy questions, contact: