Privacy Policy
Last updated:
This policy covers getfro.st, including the Permafrost key pages at getfro.st/perma, and Permafrost's storage server at permafrost.wihiaawb.com. whatithasisandalwayswillbe ("we", "us") operates these services and determines how collected data is used. Permafrost is intended for adults, and we do not knowingly collect data from children.
Frost, the application, collects no personal data about you. If you use Permafrost, the data sent by Frost is handled as described below. Security and privacy in Frost's help documentation outlines what else Frost connects to.
#The Website
Apart from the Permafrost key pages, getfro.st features no accounts, forms, cookies, or analytics trackers.
Cloudflare hosts the site and processes every visit, capturing your IP address and browser details. Pages also load assets from GitHub (Frost's star count, help documentation, changelogs, and release details) and jsDelivr (the code used to display them), which process similar connection details.
#What Permafrost Collects
| What | Why | How Long |
|---|---|---|
| Your email address, provided by Polar | To send you a replacement key if you lose yours and to communicate regarding your subscription | Until 90 days after your account closes |
| Polar's identifiers for you, your subscription status, and your subscription size | To verify your active plan and entitlements | Until 90 days after your account closes |
| A cryptographic fingerprint of your access key (never the key itself) | To authenticate your key | Until 90 days after your account closes |
| Your encrypted backups, along with each object's name, size, checksum, and upload timestamp | To store and retrieve your backups | Until you delete them or your account closes |
| Daily upload and download volumes | To monitor fair use and maintain service performance | 60 days |
| Your IP address when purchasing a key or requesting a recovery | To prevent abuse and limit fraud. Polar also uses it at checkout to calculate applicable taxes | Never stored permanently; counted in memory only |
| A single cookie during the key purchase flow | To ensure only your browser receives the newly generated key | Until the key is displayed, or 2 days maximum |
| A fingerprint of each recovery link | To securely issue a replacement key | Links remain active for 30 minutes; the record is removed 1 day later |
Our operational logs record system events, such as account IDs and error codes. They never contain email addresses, IP addresses, or access keys, and older log entries are overwritten as new ones arrive.
We use this data to deliver the subscription services you requested, keep Permafrost secure and fair, and fulfill our legal obligations. An email address is required to subscribe; without it, Polar cannot deliver receipts, and we cannot issue a replacement key if you lose yours.
#What We Cannot See
Frost encrypts your files locally on your computer before upload, using a key held exclusively by you. Permafrost stores encrypted data that we cannot read and cannot use to recover your backups if you lose your recovery phrase.
Like any storage provider, Permafrost can observe your storage volume size and the timestamps of your backups and restores. Security and privacy provides a precise breakdown of what storage providers can see. All connections use TLS encryption, and your payment card details never touch our servers.
#Third-Party Processors
| Who | What They Do | What They Receive |
|---|---|---|
| Polar | Manages subscriptions, processes payments, handles taxes and receipts, and runs the customer portal | Your email address, payment details, and IP address at checkout |
| Backblaze | Provides underlying storage for backups | Encrypted data blobs only |
| Cloudflare | Handles network routing for getfro.st and Permafrost | All transit data, including IP addresses |
| Resend | Delivers key recovery emails | Your email address and recovery link |
| Our server host | Hosts the Permafrost infrastructure | All data maintained by Permafrost |
| GitHub and jsDelivr | Serve static web assets for getfro.st | IP addresses and browser details |
Permafrost's servers and storage buckets are located in the United States, and our third-party infrastructure providers are US-based companies. Cloudflare also routes traffic through data centers globally to optimize performance. We utilize these providers because Permafrost cannot operate without them, and each receives only the minimum data required for its function. Polar and Cloudflare maintain their own independent records under their respective privacy policies.
We do not sell or share your data with unauthorized third parties. If compelled by law to disclose data, we will comply, though your backups remain encrypted and inaccessible to us.
#Data Retention
Your account enters closure 45 days after your subscription ends. We retain your email address and core account records for an additional 90 days before permanent deletion. Database backups containing historical records are purged within 30 days following that.
When your account closes, your backups become eligible for deletion. Deleted data may persist on our storage provider's infrastructure until their routine retention and deletion cycles complete.
You may request earlier deletion of your data by emailing care@getfro.st from the address associated with your subscription. If your subscription is active, we will terminate it first, then delete your backups and records.
#Your Rights
You have the right to inquire about what data we hold, request a copy, correct inaccuracies, request deletion, or restrict processing for specific purposes. You can update your email address directly within the customer portal.
To exercise these rights, email care@getfro.st from your subscription address so we can verify your identity. We respond within 7 days. If you are unsatisfied with our response, you may lodge a complaint with the data protection authority in your local jurisdiction.
#Policy Changes and Contact
We may update this policy periodically. When changes occur, the revision date at the top will be updated.
Direct any questions regarding this policy to care@getfro.st.