1. Overview

DirectFileTransfer ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our peer-to-peer file transfer service.

2. The Core Principle: No File Storage

Unlike traditional file sharing services, we do not store, process, or have access to the files you transfer. All file transfers happen directly between your device and your recipient's device using WebRTC peer-to-peer technology.

3. Information We Collect

3.1 Connection Metadata

To facilitate peer-to-peer connections, we temporarily collect:

• Room IDs: Random identifiers for connection sessions
• IP Addresses: Used for establishing direct connections (IPv4/IPv6)
• Connection State: Whether peers are connected or disconnected
• Signaling Data: WebRTC handshake information (temporary)

This data is deleted immediately after your connection session ends.

3.2 Analytics Data

We use Google Analytics to understand how people use our service:

• Page views and navigation patterns
• Browser type and device information
• General geographic location (country/city level)
• Time spent on the service
• Events like "room created" or "file transfer completed"

Important: This analytics data does NOT include file names, file contents, file sizes, or any information about what you're transferring.

3.3 Audit Logs

For service improvement and troubleshooting, we maintain limited audit logs containing:

• Timestamp of transfer sessions
• Transfer status (started, completed, cancelled, failed)
• Connection IPs (sender and receiver)
• Anonymous session identifiers

These logs are automatically deleted after 30 days and contain no information about file contents.

4. What We Do NOT Collect

We explicitly do NOT collect, store, or have access to:

• File contents or data
• File names
• File sizes
• File types or formats
• Personal identification information
• Email addresses or phone numbers
• User accounts or profiles
• Payment information (service is free)

5. How We Use Information

The limited information we collect is used solely for:

• Enabling Connections: Facilitating peer-to-peer connections between users
• Service Improvement: Understanding usage patterns to improve the service
• Technical Support: Troubleshooting connection issues
• Security: Detecting and preventing abuse or malicious activity

6. Data Security

Your transferred files are protected through:

• End-to-End Transfer: Files go directly from sender to receiver
• Encrypted Connections: WebRTC uses DTLS encryption by default
• HTTPS: All web traffic uses TLS encryption
• No Storage: Files are never written to disk on our servers
• Session Isolation: Each transfer session is isolated and temporary

7. Third-Party Services

7.1 Google Analytics

We use Google Analytics to understand service usage. Google may use cookies to track your visit. You can opt out using the Google Analytics Opt-out Browser Add-on.

7.2 Google Cloud Platform

Our signaling servers run on Google Cloud Run. Google may collect server logs as part of their infrastructure operations. See Google Cloud Privacy Notice.

8. Data Retention

• Connection Metadata: Deleted immediately after session ends
• Audit Logs: Automatically deleted after 30 days
• Analytics Data: Retained according to Google Analytics settings (typically 26 months)
• Your Files: Never stored, so nothing to delete!

9. Your Rights

Since we don't collect personal information or store files, there's minimal data associated with your use of the service. However, you have the right to:

• Know what data we collect (outlined in this policy)
• Request deletion of audit logs related to your IP address
• Opt out of analytics tracking using browser extensions
• Stop using the service at any time

10. Children's Privacy

DirectFileTransfer does not knowingly collect information from children under 13. The service is designed for general use and does not target children. Parents should supervise their children's internet usage.

11. International Users

DirectFileTransfer is hosted on Google Cloud Platform in the US-Central region. By using the service, you consent to the transfer and processing of connection metadata in the United States. Your actual files are transferred directly between peers and never reach our servers.

12. Changes to This Policy

We may update this Privacy Policy occasionally. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

• Website: directfiletransfer.com
• GitHub: Report an Issue