Updated 12 October 2026
Privacy
Send is built so that we can’t read what you send. There are no accounts or ads. We keep limited aggregate statistics as described below.
Files and text
- Between your devices, files and text are end-to-end encrypted and usually travel directly between the two browsers. When a direct connection isn’t possible, the encrypted data passes through our server without being stored or readable.
- Share links are encrypted in your browser before upload. We store only encrypted data and an encrypted file list. The key is in the part of the link after
#, which browsers never send to us.
What our server does see
- The IP address of devices that connect, and of people who upload. Uploader IP addresses are logged with each upload to enforce limits and handle abuse reports.
- The size of uploaded files, when they were uploaded, and when they expire.
- Pairing codes and connection timing, held in memory only for the length of a session.
Cookies and browser storage
- A cookie with a random identifier, so you can see and delete your own uploads. It lasts 30 days and is not used for anything else.
- During early access, a separate protected cookie remembers an approved invitation in this browser for up to 30 days. The server stores the invitation’s name, code hash, expiry and signing key. Revoking the invitation also revokes its browser approvals.
- Your browser keeps a key that encrypts your upload list, and may hold decrypted downloads temporarily. Copies are cleaned up after saving; if you close the page first, cleanup happens on a later visit where the browser supports it.
Early-access statistics
We count successful activations of each invitation and keep country totals for that invitation. Country estimates come from a local database, so your IP address is not sent to a lookup service. VPNs can affect these estimates.
We also count broad browser and operating-system categories across invitation activations. These platform totals are not linked to individual invitations. We do not keep full browser user-agent strings, browser identifiers or individual IP records for these statistics. Page visits and downloads are not counted.
IP Geolocation by DB-IP, using the Country Lite database under the Creative Commons Attribution 4.0 license.
Other services
Send uses Cloudflare Turnstile to check browsers before pairing devices or starting uploads. Cloudflare receives browser and network information for this security check. Our server sends the resulting token and your IP address to Cloudflare for verification; file contents and decryption keys are not part of that request.
To connect two devices directly, browsers ask Cloudflare’s STUN service for their public address, so Cloudflare sees your IP address. No file data is sent to it.
When two devices can’t connect directly, their transfer may be relayed through Cloudflare’s TURN service. Cloudflare then carries the data, which is already end-to-end encrypted, so it sees your IP address and how much is sent, but never the contents.
How long we keep things
- Uploads are deleted 1 hour after they finish, or sooner if you delete them. Unfinished uploads are removed after 5 minutes without progress.
- Server logs, including uploader IP addresses, rotate automatically as they reach the configured size limits.
Your choices
You can delete your uploads and links at any time from the Upload tab. For anything else, reach us through the contact page.