Privacy Policy

This policy explains how TransferFiles.net ("we", "us") handles information when you visit transferfiles.net or use its file transfer tool. If you have questions, email contact@transferfiles.net.

1. Summary

We never receive, store or have access to the files you transfer.
Setting up a connection involves short-lived technical data, such as IP addresses, passing through connection servers.
The website shows ads through Google AdSense and measures usage with Google Analytics. Both use cookies, subject to your consent where the law requires it.
We don't sell your personal information.

2. Files you transfer

Files go directly from the sender's browser to the receiver's browser over a WebRTC data channel encrypted with DTLS. They're not uploaded to, stored on, or scanned by any server operated by us. File names and sizes are shared between the two browsers so the receiver can see what's arriving. That information isn't sent to us.

If the two devices can't connect directly because of firewall or network restrictions, the encrypted data is routed through a TURN relay server. We currently use the Open Relay service operated by Metered. Relay servers forward encrypted packets. They can't read the contents, and they don't keep the files.

3. Connection (signaling) data

To introduce two browsers to each other, the tool uses a signaling ("broker") server provided by the open-source PeerJS project, and public STUN servers (including ones run by Google, Cloudflare and Nextcloud). These let each browser discover how it can be reached.

During this process, the servers see technical information such as IP addresses, a random session identifier (the code shown on screen), and network connection candidates. This data is used only to establish the connection and is transient. We don't link it to your identity or keep logs of who sent files to whom. These third-party services handle data under their own policies.

4. Website hosting logs

Like most websites, our hosting provider may automatically record standard request data: IP address, browser type, operating system, referring page, requested page, and the date and time. This data is used for security, abuse prevention and fixing problems, and is kept for a limited period.

We use Google AdSense to show ads, which is how the service stays free. Please note:

Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this website and other websites.
Google's advertising cookies allow it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet.
You can opt out of personalised advertising by visiting Google's Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info (US) or www.youronlinechoices.eu (EU).
If you opt out of personalisation, you'll still see ads, but they'll be less relevant.

For more information, see How Google uses information from sites or apps that use its services and How Google uses cookies in advertising.

6. Analytics: Google Analytics

We use Google Analytics 4 to understand, in aggregate, how people use the site: which pages are read, which browsers are common, and where transfers fail. This helps us decide what to fix and which guides to write. Google Analytics uses cookies and processes data such as an approximate location derived from your IP address, your device type, and the pages you visit. We don't use it to identify individuals. You can install the Google Analytics opt-out browser add-on.

If you visit from the European Economic Area, the UK or Switzerland, you'll see a consent message provided through Google's consent management platform. It asks for your choice before advertising and analytics cookies are used for personalisation. You can change your choice at any time using the privacy settings link shown with that message. More detail is in our Cookie Policy.

8. Contact form and emails

Our contact form doesn't submit data to our servers. It opens your own email app with your message pre-filled. When you email us, we receive your email address and whatever you choose to include. We use it only to reply and to keep a record of the conversation.

Legitimate interests: operating, securing and improving the website and transfer tool, and transient connection data.
Consent: personalised advertising and analytics cookies, where consent is required.
Legal obligation: where we must keep or disclose information by law.

10. Who receives data

We don't sell, rent or trade personal information. Data is processed by the service providers listed above: Google (advertising and analytics), the PeerJS signaling service, STUN and TURN providers, and our hosting provider. We'll also share data where required by law. Some of these providers are located outside your country, including in the United States, and rely on recognised safeguards for international transfers.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. If you're in the EEA or UK, you may also complain to your local data protection authority. California residents have the right to know, delete and correct personal information, and to opt out of "sale" or "sharing" for cross-context behavioural advertising. You can exercise that right through Google's Ads Settings or by contacting us. To make a request, email contact@transferfiles.net.

12. Children

TransferFiles.net isn't directed at children under 13 (or under 16 in the EEA), and we don't knowingly collect their personal information.

13. Changes to this policy

We'll post any changes on this page and update the date at the top. If a change is significant, we'll make it prominent on the site.