Privacy policy
Last updated: 17 October 2026In short
TFile has no accounts and asks for no personal details. Your files go directly from one browser to the other and are never stored on our servers. To connect the two browsers, our servers briefly handle technical data such as your IP address. There is no analytics, advertising or tracking.
Your files and texts
Files, and texts you send with the clipboard section, are sent over a WebRTC connection that is encrypted end to end between the two browsers (DTLS). Usually the connection is direct. When a firewall or network setup prevents that, the data passes through our relay server (TURN), still encrypted: the relay can't read it and doesn't store it. To find a direct route, your browser asks the same server for its own public address (STUN). File names, file contents and texts are never sent to our signaling server. TFile reads your clipboard only when you paste or tap Paste, and sends nothing until you tap Send.
Received files are kept in the receiving browser until that tab is closed: in memory, or, for files of 16 MB and more, in the browser's private storage for this site on your device (not a folder you can see), which is cleared the next time TFile is opened in that browser. Texts are kept in memory in both tabs until they are closed. Anyone who opens your link before the intended person can join your room, so share links only with the person you mean to send files to.
What our servers handle
| Data | Why | Kept |
|---|---|---|
| IP address | Needed to deliver the website and to connect the two browsers | In memory while you are connected; in server logs (below) |
| Browser user agent | Turned into a device label such as "macOS Chrome" shown to the other person | In memory while you are connected |
| Random user ID and room ID | Generated for you to pair the two browsers; not linked to your identity | In memory while you are connected; in your tab's session storage until you close it |
| Connection setup messages | Network addresses and encryption parameters that the two browsers exchange to connect; passed through, not stored | Not kept |
| Server logs | Web server access logs (IP address, time, requested page, browser) and error logs, used to run the service and investigate problems and abuse | Deleted automatically after 14 days |
We don't sell this data, share it for advertising, or combine it with other data to identify you.
Third parties
- Amazon Web Services hosts our servers. Data our servers handle is processed on AWS infrastructure.
- The other person. The person you connect with sees your generated name and device label, and their browser learns your IP address when a direct connection is made. That is how peer-to-peer connections work.
Cookies and storage
TFile sets no cookies. Two small session storage entries keep your connection working while the tab is open. See the cookie policy.
Legal basis
We process this data because it is necessary to provide the service you use (connecting two browsers and delivering the website), and for our legitimate interest in keeping the service secure and working.
Your rights
Depending on where you live, for example under the GDPR, you may have the right to access, correct or delete personal data about you, to object to its processing, and to complain to a data protection authority. Because TFile has no accounts and doesn't link data to your identity, we usually can't find data belonging to you, but we'll help where we can.
Contact
Questions about privacy: support@tfile.io
Changes
If how TFile handles data changes, this page will be updated first, with a new date at the top.