Privacy Policy

Welcome to SnapTransfer ("we," "us," or "our"). This Privacy Policy explains how SnapTransfer, operating at snaptransfer.cloud, collects, uses, discloses, and safeguards your information when you use our peer-to-peer (P2P) file-sharing service. Please read this policy carefully. By using SnapTransfer, you agree to the practices described herein.

01Information We Collect

Account Information (Optional)

Registration is optional. If you choose to create an account, we collect:

• Email address — used for authentication and account recovery
• Username (optional) — a display name you may choose
• Password — stored in securely hashed form; we never store or access your plaintext password

File Data

SnapTransfer uses peer-to-peer (P2P) technology to transfer files directly between the sender and recipient. By default, your files are not stored on our servers — they are streamed directly between connected peers.

If you choose to use our optional server-hosted transfer feature (e.g., when the recipient is not online at the time of sending), files may be temporarily stored on our servers. In such cases, files are automatically deleted within 24 hours or when the sender manually deletes the transfer — whichever comes first. We do not access, scan, or analyze the contents of your files.

Usage & Technical Data

We automatically collect certain information when you interact with our service:

• IP address and approximate geolocation
• Browser type, version, and operating system
• Pages visited and features used
• Transfer metadata — file count, file sizes, download counts, and timestamps
• Device information and screen resolution
• Referral URLs

02How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our P2P file-sharing service
• Authenticate your identity and manage your account
• Facilitate peer-to-peer file transfers and optional server-hosted transfers
• Generate internal analytics and usage statistics (e.g., transfer counts, storage usage)
• Detect, prevent, and address abuse, fraud, and security threats
• Improve our service, fix bugs, and develop new features
• Respond to your inquiries and provide customer support
• Comply with legal obligations

03Cookies & Local Storage

SnapTransfer uses a minimal set of cookies and browser local storage, all of which are essential to the service:

Essential Cookies

• Authentication cookies — secure, HttpOnly cookies that keep you signed in across sessions. These cannot be read by client-side scripts.

Local Storage

• Theme preference — remembers your light/dark mode setting
• Transfer management tokens — allows anonymous senders to manage their active transfers

Third-Party Cookies (Future)

We do not currently use any third-party analytics or advertising cookies. If we introduce services such as Google Analytics or Google AdSense in the future, we will update this Privacy Policy and notify you prior to their activation. You will have the ability to manage your cookie preferences at that time.

04Data Retention

• P2P transfers — files transferred peer-to-peer are streamed directly between users and are not stored on our servers at any point.
• Server-hosted files — when you opt to store files on our servers, they are automatically deleted within 24 hours of transfer creation, or upon manual deletion by the sender, whichever is sooner. In the future, paid plans may allow custom expiration periods; any such changes will be reflected in an updated version of this policy.
• Account data — retained for as long as your account is active. You may request deletion of your account and associated data at any time.
• Logs and analytics — retained for a reasonable operational period to maintain security and improve the service, after which they are purged.

05Data Sharing & Disclosure

We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.

We may disclose your information only in the following circumstances:

• Service providers — we use infrastructure providers (hosting, storage, database services) that process data on our behalf under strict contractual obligations. These providers do not have independent access to your data.
• Legal compliance — we may disclose information if required to do so by law, in response to valid legal process (such as a court order or subpoena), or to protect the rights, safety, and property of SnapTransfer, our users, or the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

06Data Security

We take reasonable technical and organizational measures to protect your information, including:

• P2P transfers keep your files off our servers entirely — data flows directly between peers
• Data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security)
• Passwords are hashed using industry-standard algorithms before storage
• Authentication tokens are short-lived and automatically refreshed
• Access controls limit who can access infrastructure and data
• File integrity is verified using SHA-256 checksums

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

07Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your account and associated personal data
• Data portability — request your data in a structured, commonly used format
• Opt-out — opt out of any future marketing communications
• Withdraw consent — withdraw consent where processing is based on consent
• Restrict processing — request that we limit how we use your data

To exercise any of these rights, please contact us at snaptransfer.work@gmail.com. We will respond to your request within 30 days.

08Children's Privacy

SnapTransfer is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at snaptransfer.work@gmail.com, and we will promptly delete such information.

09Terms of Service & Acceptable Use

Your access to and use of SnapTransfer is subject to our rules governing user conduct, file sharing limitations, and legal agreements. For complete guidelines on acceptable use, intellectual property, and service conditions, please refer to our dedicated Terms of Service.

10Region-Specific Disclosures

🇪🇺 European Economic Area (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following additional disclosures apply:

• Legal bases for processing: We process your data based on (a) your consent (e.g., when you create an account), (b) contractual necessity (e.g., to deliver file transfers), (c) legitimate interests (e.g., service improvement, fraud prevention), and (d) legal obligations.
• Data subject rights: You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. To exercise these rights, contact us at snaptransfer.work@gmail.com.
• Complaints: You have the right to lodge a complaint with your local data protection supervisory authority.
• International transfers: Your data may be transferred to and processed in countries outside the EEA. Where this occurs, we ensure appropriate safeguards are in place.

🇺🇸 California (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights:

• Categories of information collected: Identifiers (email, username, IP address), internet activity (browsing history, interactions), and electronic information (device/browser data).
• Sale of personal information: We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising.
• Your rights: You have the right to know, delete, correct, and opt-out. You may also designate an authorized agent to submit requests on your behalf.
• Non-discrimination: We will not discriminate against you for exercising your privacy rights.

🇮🇳 India (DPDP Act 2023)

If you are located in India, the Digital Personal Data Protection Act, 2023 provides you with rights as a Data Principal:

• Right to information: You have the right to obtain a summary of your personal data and the processing activities performed on it.
• Right to correction and erasure: You may request correction of inaccurate data or erasure of data that is no longer necessary.
• Right to grievance redressal: You may reach out to us at snaptransfer.work@gmail.com for any grievance related to the processing of your personal data.
• Consent: Where we rely on your consent to process personal data, you have the right to withdraw consent at any time by contacting us or deleting your account.

11Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, provide notice through our website.

Your continued use of SnapTransfer after any changes to this policy constitutes your acceptance of the updated terms.

12Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: