Privacy Policy

Last Updated: January 20, 2026

---

1. Introduction

Welcome to "FileTransfer Pro". We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our file transfer service.

2. Information We Collect

2.1 Information You Provide

When you use our service, you may optionally provide:

• Email addresses - Only if you choose to provide sender or recipient email addresses
• Messages - Optional messages attached to file transfers
• File names and metadata - Information about the files you upload

2.2 Information We Collect Automatically

When you use our service, we automatically collect:

• IP addresses - For security, rate limiting, and abuse prevention
• Upload/download activity - Timestamps and file metadata (not content)
• Browser information - User agent strings for compatibility
• Session cookies - For maintaining your upload session

3. How We Use Your Information

We use the collected information for:

• Service provision - To enable file uploads and downloads
• Email notifications - To send download links (only if you provide email addresses)
• Security and abuse prevention - Rate limiting, spam prevention, security monitoring
• System maintenance - Troubleshooting and improving service reliability
• Legal compliance - Responding to legal requests when required by law

4. File Content and Storage

4.1 What We Do NOT Do

• ❌ We do NOT read, scan, or analyze your file contents
• ❌ We do NOT use your files for any purpose other than transfer
• ❌ We do NOT share your files with third parties
• ❌ We do NOT keep files permanently

4.2 File Retention

All files are automatically deleted after 7 days. Download links expire after the same period. We do not retain files beyond this period.

4.3 Your Responsibility

You are responsible for the content you upload. Do not upload:

• Illegal content
• Copyrighted material without permission
• Malware or viruses
• Personal data of others without consent

5. Data Security

We implement security measures including:

• HTTPS encryption - All transfers are encrypted in transit
• Randomized storage names - Files stored with unpredictable names
• Secure tokens - HMAC-signed download tokens that expire
• Rate limiting - Protection against abuse and brute force attacks
• CSRF protection - Protection against cross-site request forgery
• No directory listing - Files cannot be browsed or discovered

6. Cookies and Tracking

We use essential cookies only:

• Session cookies - Required for upload functionality (HTTP-only, secure)
• CSRF tokens - Required for security

We do NOT use tracking cookies, analytics cookies, or advertising cookies.

7. Third-Party Services

We use minimal third-party services:

• Bootstrap/CDN - For UI styling (loaded from CDN)
• STUN servers - For WebRTC peer-to-peer connections (if using Nearby Share)

We do NOT use Google Analytics, Facebook Pixel, or any tracking services.

8. Your Rights

You have the right to:

• Access - You can request information about data we hold about you
• Deletion - Files are automatically deleted after 7 days
• Opt-out - Don't provide email addresses if you don't want notifications
• Content removal - Contact us to remove content before expiration

9. Data Sharing and Disclosure

We do NOT sell, trade, or rent your personal information. We may disclose information only when:

• Required by law or legal process
• To prevent fraud or security threats
• To protect our rights and property

10. International Users

Our service may be accessed from anywhere in the world. By using our service, you consent to the transfer of your information to our servers. We comply with applicable data protection laws.

11. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us information, please contact us.

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the service constitutes acceptance of changes.

13. Contact Us

For privacy-related questions, content removal requests, or to exercise your rights, contact us at:

Email: admin@yourdomain.com
DMCA/Takedown: legal@yourdomain.com

---