Your transfer is private infrastructure

Files travel over HTTPS and are stored encrypted at rest by our storage provider. They are reachable only through signed links that we generate on demand and that expire within minutes.

You choose how long a transfer lives — 1, 3, 7, 14 or 30 days depending on your lane. When that time is up, the stored objects and their records are deleted. You can delete a transfer yourself at any time from your dashboard, which removes the files immediately.

• We do not train AI on your files.
• We do not inspect file contents for advertising or profiling.
• We do not sell files, transfer history or contact details.
• We do not keep files longer than the expiry we showed you.

For each transfer we store its metadata: file names, sizes, types, chosen expiry, download counts and the times things happened. We log downloads so abuse can be investigated. If you set a password, we store only a salted hash of it — we cannot recover it for you.

Only you can list your own transfers. Our staff roles are separated so that no single role has unrestricted access, and every administrative action is written to an audit log. Storage credentials never reach the browser.

You can request a copy of your data, correction, or deletion of your account and everything attached to it. We process personal data in line with the GDPR and keep it to the minimum we need to run the transfer.

Every transfer page has a report link. Reports go to a human. We may withdraw a transfer that breaks our terms, and we record why.