Privacy Policy
Last updated: October 1, 2026
Overview
SecureShare is an open-source, end-to-end encrypted file transfer application designed with privacy as a core principle. Files travel through our relay server as ciphertext only. We collect the absolute minimum data necessary to operate the service.
What We Do NOT Collect
- File contents and file names — all transfers are end-to-end encrypted. The relay server only forwards ciphertext and never sees your data.
- File names or metadata — not logged, not stored.
- Session codes — not logged on the server.
- User accounts — there are none. No registration, no login.
- Cookies or tracking pixels — we don't use any.
- IP addresses in logs — IPs are only used in-memory for rate limiting and are never written to disk.
What We Collect
We collect anonymous, aggregated statistics to understand how the service is used and to improve it:
- Relay statistics: total number of sessions, bytes relayed, session durations (aggregated, not per-user).
- App version & OS type: to know which platforms need support.
- Crash reports (on by default, can be switched off): when the app crashes, an anonymous report (error type, traceback with your home folder removed, app version, OS, RAM/CPU count) is sent to our relay server. No file names, file contents, session codes or IP addresses are included in the report. You can turn this off in the app under Diagnostics → Privacy → Send anonymous crash reports.
- Transfer statistics (off by default, opt-in): if you enable Diagnostics → Privacy → Send anonymous transfer statistics, the app reports the outcome of each transfer (success / error / cancelled), a file-size range (e.g. "10-100MB", never the exact size), duration, app version and OS.
- Landing page analytics: page views, referrer domains (not full URLs), selected language, screen size bucket (mobile/tablet/desktop). Unique visitors are counted using a SHA-256 hash of IP + daily rotating salt — the hash is not reversible and changes every day.
Data Storage
- All analytics data is stored on our self-hosted server (Oracle Cloud, Frankfurt region).
- No data is shared with third parties.
- No external analytics services (Google Analytics, etc.) are used.
- JSONL log files are rotated monthly and limited in size.
Downloads
Application downloads are served through GitHub Releases. GitHub's own privacy policy applies to the download process. We track download counts anonymously on our landing page via JavaScript beacons.
End-to-End Encryption
All file transfers use XChaCha20-Poly1305 encryption with keys derived from X25519 key exchange. The relay server acts only as a dumb pipe — it cannot decrypt, inspect, or modify any transferred data.
Open Source
SecureShare is fully open source. You can audit the code, verify our privacy claims, and build the application yourself:
github.com/artmarchenko/SecureShare
Contact
If you have questions about this privacy policy or the data we collect:
← Back to SecureShare