Privacy

Short version: your documents are encrypted on your phone, the server cannot read them, and they are deleted the moment they reach the computer you sent them to.

What happens to a file you send

Your phone encrypts the file before it leaves the device. The key is derived from a one-time key exchange between your phone and the receiving computer. The server relays the encrypted pieces without holding the key, so it cannot open them.

Once the receiving side confirms it has written the file, the encrypted pieces are deleted from the server immediately. Anything never collected is deleted within 24 hours. Nothing is backed up.

What we do not collect

• No account. There is nothing to sign up for.
• No file names, page contents, or thumbnails are logged.
• No advertising, no advertising SDKs, no third-party trackers.
• No selling or sharing of anything to anyone.

What the server does record

Ordinary web server logs, which include IP addresses and request paths, for keeping the service running and stopping abuse. Pairing codes appear in those paths and expire within 15 minutes. Logs are rotated and not used to build a profile of you.

The receiver app

If you install the desktop receiver, it stores its pairing keys and your chosen folder on your own computer. It only makes outbound connections and never opens a port for anything on the internet to reach.

Contact

Questions or a problem to report: hello@deskdrop.me