sftp'ing

Privacy Policy

Last updated: March 19, 2025

We at sftp.ing ("we", "us", "our") value your privacy and aim to collect only the minimal data necessary to keep our file-sharing service running securely. This Privacy Policy explains what information we collect, how we use it, and your rights regarding it. If you disagree with anything here, please stop using our Service immediately.

1. What Information Do We Collect?

We collect minimal personal data, focusing on privacy while ensuring the Service operates smoothly:

• Personal Data: Username and password (if registration is used); no email or social login data is collected.
• Connection Data: IP address, timestamps of connections, and URLs generated for file sharing, stored in logs for up to 30 days.
• No Content Tracking: We do not log, store, or inspect file contents or metadata - files are relayed only while you're connected.

2. How Do We Use Your Information?

We use your data solely to provide and secure the Service:

• To manage WebSocket connections for real-time file relay.
• To ensure security (e.g., detect abuse or block malicious IPs).
• To troubleshoot and maintain service functionality.

No data is used for marketing, analytics, or any purpose beyond keeping `sftp.ing` running.

3. Will Your Information Be Shared With Anyone?

We share data only when necessary:

• With infrastructure providers to support WebSocket functionality.
• With law enforcement if required by legal obligations (e.g., subpoenas or court orders). Logs, including IPs and timestamps, may be disclosed in such cases.

Your file-sharing links are private and only active when you're connected - no automatic sharing occurs.

4. Do We Use Cookies and Other Tracking Technologies?

We use minimal cookies for essential functions (e.g., session management, theme preference). No analytics or third-party tracking technologies are employed.

5. How Do We Handle Social Logins?

We do not offer social logins. All access is through direct registration or anonymous use, minimizing data collection.

6. What Is Our Stance on Third-Party Websites?

We have no third-party interactions like advertisements. Any external links (e.g., support pages) are your responsibility to review for privacy practices - we're not liable for them.

7. How Long Do We Keep Your Information?

Connection logs (IP, timestamps, URLs) are stored for a maximum of 30 days, then deleted. No file contents are retained - files are only available as long as you, the publisher, are actively sharing them via the Service.

8. How Do We Keep Your Information Safe?

We use technical measures to protect your data:

• Files are encrypted end-to-end with SHA-256 encryption during transfer. We have no ability to decrypt or inspect file contents.
• Connection data is secured, but transmission over the internet carries inherent risks - you're responsible for link security.

Since we don't store files, our exposure to breaches is minimal, but no system is 100% secure.

9. Do We Collect Information From Minors?

We don't knowingly collect data from anyone under 18. If we detect such use, we'll terminate the account and delete the data.

10. What Are Your Privacy Rights?

You can review or delete your account data directly in your settings - no need to contact us. We collect so little that you control most of it. You can withdraw consent by stopping use, though prior processing remains valid.

11. Controls for Do-Not-Track Features

We don't respond to Do-Not-Track signals, as we perform no non-essential tracking.

12. Do We Make Updates to This Policy?

Yes, we may update this Policy, reflected by a new "Last updated" date. Continued use after updates means you accept them. Check back regularly, especially with our 30-day Terms acceptance prompt.