Legal

Privacy policy

This is short because there isn’t much to tell. The service can’t read your files and keeps very little besides.

What is processed

Only what the service needs to work. Nothing is sold and there is no advertising. For a direct transfer, the two browsers exchange connection details, including IP addresses, through the service so they can find each other. Nothing of that is stored.

Data
Purpose
Kept
Transfer id, salt, encrypted metadata, sizes
Deliver the transfer
Until it expires, 24 hours at most
Hashed IP address
Abuse prevention, rate limits
With the transfer; with a report, 14 days

What is kept in your browser

The service sets no cookies. It does keep a few things in your browser’s own storage, all of them needed for something you are doing on this site. None of it is used to follow you, and none of it is sent anywhere else.

Data
Purpose
Kept
Language
Showing the site in the language you picked
Until you clear it
Expiry settings
Only when you tick “Remember these settings”
Until you untick it
Transfers you sent, with their key
Coming back to an upload, seeing downloads, deleting
Until they expire, or you forget them
Encrypted pieces of a file
Resuming an upload and sending directly
While the upload runs; a day at most

Because all of this is needed for the service to work, no consent banner is shown. You can remove a transfer from your browser with Forget on this device, and everything at once by clearing this site’s data in your browser settings.

Companies involved

OVHcloud in France stores the encrypted files. It cannot read them either.

Your rights

You can ask what is held about you, have it corrected or deleted, or take it with you. Write to [privacy email]. Complaints can also go to the Autoriteit Persoonsgegevens, the Dutch data protection authority.

Last changed: [date]. The English version is the one that counts if a translation ever disagrees.