Privacy

File transfers go directly between browsers using WebRTC data channels (PeerJS). The file bytes travel peer-to-peer and never touch our servers. We have no copy, no log, and no ability to access your files.

The share code is a short ID used only to establish the WebRTC connection. Once the connection is open, it is no longer needed and nothing associated with it is stored.

When you share text, the content is stored encrypted-at-rest in Upstash Redis with a 24-hour time-to-live. After 24 hours the key is automatically deleted. If you choose “Burn after reading,” the content is deleted the moment the first recipient retrieves it.

We never log the content of text snippets. Rate-limiting counters (per IP, reset every 60 seconds) are stored separately and contain no content.

Maximum text size: 100 KB.

We use Plausible Analytics, a privacy-friendly tool that collects no personal data, sets no cookies, and does not track individuals across sessions or sites. Events tracked include transfers started and completed, and whether a TURN relay was used (an anonymous boolean). No file names, sizes, or content are ever sent to analytics.

• Store file content on a server
• Read or log text content
• Require an account or email
• Set advertising or tracking cookies
• Sell or share your data with third parties

Found an issue or have a privacy concern? Reach us on X.