— Privacy statement

Privacy.

Beamdrop's privacy approach is structural rather than promissory. We do not log any data because we never have access to your files.

What we never see

• The contents of any file you send or receive.
• The names, sizes, or types of those files.
• Who you sent files to, or who sent files to you.

Files travel directly between two browsers over an end-to-end encrypted WebRTC channel. The encryption keys are negotiated between the two browsers and never leave them.

What the signalling server does see

To connect two browsers, our Worker briefly processes the following:

• Your IP address, assigned by your network, is hashed with a server-side secret to generate a "nearby devices" room name. This hash is one-way, and the IP address is never stored.
• WebRTC signalling messages (SDP and ICE candidates) describe network paths between browsers, not file contents. These messages are forwarded to the intended peer and then immediately discarded.

No request body, IP, or signalling payload is written to disk, sent to any analytics provider, or persisted in any form.

Cookies and local storage

Beamdrop does not set cookies. We use one localStorage entry to remember your preferred display name across sessions, which you can clear from your browser at any time.

Third parties

We use Cloudflare to host the website. As with any CDN, Cloudflare's network sees connection metadata such as your IP address and the requested URL. Cloudflare's privacy policy applies to this layer. We do not use any other third-party scripts, fonts, or services.