The FrostFile application sends nothing anywhere. Ever.
Everything you type stays on your own computer. There is no account, no sign-in, no sync, no cloud, no analytics and no telemetry. You can disconnect from the internet entirely and the program works exactly the same — which is the easiest way to check that this is true rather than take our word for it.
What the app stores, and where
FrostFile keeps what you enter in a file on your own machine: names, dates of birth, Social Security numbers, email addresses, phone numbers, postal addresses, freeze confirmation numbers and PINs, reminders, notes, and any credit-report text you choose to import.
All of that is encrypted with a key made from the passphrase you choose. We never see it, because it never leaves your computer, and the passphrase itself is never stored anywhere — not even on your own machine. There is no recovery key and no back door. That is deliberate, and it has a real cost: if you lose your passphrase, nobody can get your records back, including us.
Entering a full Social Security number is optional and switched off by default. A last-four field is offered instead, which is enough for most of what the app helps you do.
What the website collects
The site is a single page. It has no accounts, no sign-up, no forms, no advertising, no third-party scripts and no cookies.
There is an old-fashioned counter showing visits and downloads. It is two whole numbers — one that goes up when the page is opened and one that goes up when a file is downloaded. No cookie is set, no identifier is created, and nothing about who you are is stored. We cannot tell one visit from another, and we would not be able to reconstruct your visit if we wanted to.
The site and downloads are served through Cloudflare, which like any web host handles the requests needed to deliver a page. We do not add any tracking on top of that, and we do not use Cloudflare's analytics products.
If you email us to hear about new versions, we keep your address in a folder in a mailbox, and we use it for exactly that. Update emails are sent with everyone else's address hidden, so recipients never see each other. The list is not shared with, sold to, or stored by any third party — it is the same promise the app makes.
Reply with "stop" at any time and you come off it. No form, no login, no waiting.
Children
FrostFile is built partly to help parents freeze their children's credit, so it holds children's details by design. That information is entered by the parent or guardian, is encrypted like everything else, and stays on the family's own computer. It is never transmitted to us or anyone else.
How to check any of this
You do not have to trust us. The complete source code is public at github.com/wingding-dev/frostfile, so anyone able to read it can confirm what the program does. There is an automated test that fails the build if anyone ever adds the ability to make an internet connection — the promise is enforced by the code, not just written down here.
And the simplest check needs no technical skill at all: turn off your Wi-Fi and use the app normally.
If this ever changes
If the app ever needed to send anything anywhere, that would be a different program, and it would say so plainly and loudly before doing it — not in an updated policy page. This page will record the date of any change.
Contact
Questions about any of this: support@frostfile.org.