Privacy Policy

Short version: I collect almost nothing, keep it only as long as needed, and share none of it.

No cookies. No accounts. No IP logging. No analytics. This site does not track you in any way.

Your files are stored in your own S3-compatible storage bucket. The relay server is not in the download path — files go directly from your bucket to your recipient's browser. I have no interest in your files and won't access them.

To generate download links and delete expired sends on your behalf, the relay server stores your S3 API credentials in encrypted form. They are used for no other purpose. When a send expires, the credentials associated with it are deleted after the files are deleted. I recommend using a dedicated API key with the minimum required permissions — see the Getting Started guide for how to set one up.

Basic send metadata (file names, expiry date, recipient email addresses) is stored on the relay server to service active transfers. This data is deleted as soon as the send expires or is manually revoked — it is never retained beyond its useful life.

Donations are processed by Stripe. The only information I collect from Stripe is the amount of the transaction, which is used solely to maintain the Community Bucket balance. I do not collect your name, card details, or any other personal information.

Questions about this policy? Email [email protected].