Privacy and Security

Clear information about how this private backup portal handles your data.

🏠 Your data stays on your NAS

This portal does not store your photos, videos, or documents on a third-party cloud server. Uploaded content is stored on the Synology NAS configured for this service, using Synology applications such as Synology Photos, Synology Drive, and File Station where applicable.

🔑 Passwords and sessions

Your password is validated through the Synology DSM user system. Portal sessions use a signed cookie marked HttpOnly and Secure, helping prevent client-side access to session data when HTTPS is properly configured.

🛡️ Protection against common attacks

Forms include CSRF protection, security headers are reinforced, and new passwords must meet minimum complexity requirements. For stronger protection, enable two-step verification on your DSM account.

🌐 Encrypted access

The portal should be accessed through HTTPS with a valid certificate. For public access, use a properly configured reverse proxy, firewall rules, and a trusted SSL certificate such as Let's Encrypt.

📱 Official mobile apps

Use the official Synology Photos and Synology Drive apps from Apple App Store or Google Play. Do not install unofficial APKs or third-party copies, and never share your password outside the official login screen.

🚫 No third-party tracking

This portal is designed without external advertising, tracking pixels, or analytics scripts that inspect your files. The NAS administrator remains responsible for user permissions, storage assignments, backups, updates, and access security.