Your files never reach our servers. They travel directly between devices over an end-to-end encrypted WebRTC connection. When two networks block a direct connection, the encrypted data may pass through a relay that cannot read it and does not store it. Our server only relays the short connection setup messages needed to introduce two devices, and never stores them.
No accounts and no advertising. We never collect file names, file types, file contents or device names, and our own server never stores IP addresses or location. Your IP address is used only momentarily to find devices on the same network and to limit abuse; it is never written to storage.
To fix bugs and improve speed, the app sends anonymous events. You can turn this off at any time in Settings → "Share anonymous usage data".
| Event | Contents |
|---|---|
| Transfer finished | outcome, short error code, file count, total size, duration, connection type and timing |
| App opened / device found / QR pairing | timestamp, discovery time, success or failure |
| Every event | browser family, OS family, phone or desktop, app version, and a random ID that changes every day so activity can never be followed across days |
We use Microsoft Clarity to see how the app is used (clicks, scrolling, screen size, pages opened and session replays) so we can make it easier to use. All text on screen is masked before it leaves your device, so device names, file names and anything you type are not recorded. Clarity sets cookies and, like any web service, sees your IP address, browser and approximate location; that data is handled by Microsoft under the Microsoft Privacy Statement. Turning off "Share anonymous usage data" in Settings also stops Clarity from loading.
Your device keeps a random identity key, your chosen device name, paired devices and received files in browser storage. Clearing site data deletes all of it.
Questions about privacy: open an issue on the project repository.