iFileSender

Privacy Policy

Our zero-cloud storage commitment, advertising practices, and international privacy standards.

Overview and Privacy-First Commitment

At iFileSender (accessible from ifilesender.com), your privacy is our foundational architectural principle. We have specifically engineered our service so that your files are never uploaded to, inspected by, or stored on our servers.

This Privacy Policy explains how our peer-to-peer signaling architecture operates, what temporary technical data is handled during transfers, our advertising and monetization practices, and your legal rights under international privacy frameworks including the European Union / United Kingdom General Data Protection Regulation (GDPR / UK GDPR) and United States state privacy statutes including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA / CPRA).

How File Transfers Work: Zero Server Storage

iFileSender uses modern WebRTC (Web Real-Time Communication) DataChannels to stream binary file data directly between two user-controlled web browsers:

  • Direct Peer-to-Peer Transmission: Your files move straight from device to device over your local Wi-Fi network or direct internet connection. They do not travel through or get held in any intermediary cloud server storage.
  • End-to-End Encryption (DTLS 1.3 / SRTP): All data sent through WebRTC DataChannels is encrypted in transit using industry-standard Datagram Transport Layer Security (DTLS). Only the paired recipient device possesses the cryptographic keys to assemble and decrypt the file chunks.
  • Zero Cloud File Storage: We do not operate any cloud file storage, disk caches, object storage, or file databases. We cannot read, view, or reconstruct your files.
  • Volatile In-Memory Session History: A transfer history list is displayed solely inside your active browser tab for convenience. This list is kept in temporary browser RAM and is completely erased the moment you close the tab, refresh, or disconnect.
  • No File Metadata Logging: We do not record or retain your filenames, file types, file contents, or personal documents on our backend systems.

Information We Process and Ephemeral Signaling

To establish a direct connection between two browsers, our servers act temporarily as a lightweight "matchmaker" (signaling service):

  • Session Identifiers: When you open a transfer room, a temporary random session code (such as a 6-digit numeric PIN) is created.
  • SDP and ICE Candidates: The two browsers briefly exchange encrypted Session Description Protocol (SDP) packets and Interactive Connectivity Establishment (ICE) candidates (local and public IP addresses and ports) through our signaling server to discover the most direct network route.
  • Immediate Ephemeral Destruction: This connection metadata is stored strictly in volatile memory during the pairing handshake and is permanently erased when the transfer completes or automatically purged after 15 minutes of inactivity.
  • STUN and TURN Relay Servers: Browsers query STUN servers to detect public NAT IP addresses. If strict symmetric NAT or firewall rules prevent a direct peer-to-peer route, packets may pass through a TURN relay server. When TURN relay is used, the traffic remains end-to-end encrypted (DTLS) and is unreadable and unstored by the relay.

Third-Party Advertising and Monetization Disclosures

iFileSender provides a free file-sharing service. To support the maintenance, server infrastructure, and ongoing development of the platform, we display third-party advertisements on our website (such as through Google AdSense, programmatic ad exchanges, and ad networks).

Please review the following important details regarding third-party advertising partners:

  • Third-Party Ad Vendors: Third-party vendors, including Google, use cookies, web beacons, pixels, and device identifiers to serve ads based on your prior visits to our website or other websites on the internet.
  • Google AdSense & Advertising Cookies: Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to iFileSender and/or other sites across the internet.
  • Personalized vs. Non-Personalized Ads: Depending on your geographic location and cookie consent choices, advertisements may be personalized (tailored to your inferred interests and browsing history) or non-personalized (contextual ads based on current page content).
  • Advertiser Independence: Third-party advertisers are independent entities. iFileSender does not control their tracking technologies or privacy practices. Clicking on an ad banner will direct you to the advertiser's external website, which is governed by that advertiser's own privacy policy.

How to Opt Out of Personalized Advertising: You can opt out of personalized advertising and manage your tracking preferences across advertising networks by visiting the following consumer choice portals:

Cookies and Local Storage Technologies

iFileSender utilizes standard browser storage technologies for the following specific purposes:

  • Essential Functional Storage: We use browser localStorage solely to remember your chosen theme preference (Dark or Light mode) and audio notification states. This data never leaves your device.
  • Third-Party Advertising Cookies: Ad vendors (such as Google AdSense) may set cookies to serve ads, prevent repetitive ad impressions (frequency capping), aggregate ad reporting, and combat click fraud.
  • Managing Cookies: You can configure your browser to refuse all cookies, block third-party cookies, or alert you when a cookie is placed. Note that disabling cookies may affect ad rendering, but will not prevent normal peer-to-peer file transfers.

Notice for European Visitors (GDPR and UK GDPR)

If you access iFileSender from the European Economic Area (EEA), United Kingdom, or Switzerland, this section outlines your rights under Regulation (EU) 2016/679 (General Data Protection Regulation) and the UK Data Protection Act 2018:

Legal Bases for Processing (GDPR Article 6)

  • Contractual Necessity (Art. 6(1)(b)): Processing temporary WebRTC signaling metadata is strictly necessary to initiate and coordinate the requested peer-to-peer connection between your devices.
  • Legitimate Interests (Art. 6(1)(f)): Processing basic network diagnostics, hashed IP rate limiting, and technical server logs is necessary for our legitimate interests in safeguarding platform security, preventing abuse, and ensuring server uptime.
  • Consent (Art. 6(1)(a)): Where required by the ePrivacy Directive and GDPR, personalized advertising cookies and tracking scripts are placed only based on your informed consent. You may withdraw consent at any time.

Your Data Subject Rights

Under the GDPR, you have the right to access, rectify, erase, restrict, receive a portable copy of, or object to the processing of your personal data, as well as the right to withdraw consent at any time. To exercise any of these rights, contact us via our Contact Page. You also have the right to lodge a complaint with your local EU/EEA Data Protection Authority or the UK Information Commissioner's Office (ICO).

Notice for United States Residents (CCPA / CPRA & State Laws)

This section applies to residents of California and other US states with comprehensive consumer privacy laws (including Virginia, Colorado, Connecticut, Utah, and Texas):

  • Categories of Personal Information Collected: In the past 12 months, we have collected internet and network activity information (such as temporary IP addresses, browser type, device characteristics, and cookie identifiers for advertising). We do NOT collect, inspect, or retain the content or names of your transferred files.
  • No Direct Sale of Personal Information: We do not sell personal data, email addresses, or phone numbers to third parties for monetary compensation.
  • Notice of "Sharing" for Cross-Context Behavioral Advertising: The use of third-party advertising cookies and pixels (such as Google AdSense) may constitute "sharing" of personal information or "targeted advertising" under the California Consumer Privacy Act (CCPA/CPRA) and related state laws.
  • Your US Consumer Rights: You have the right to know what personal information we collect, the right to request deletion of your information, the right to correct inaccurate information, and the right to opt out of the "sale" or "sharing" of personal data for targeted advertising. You will not face discrimination for exercising any privacy rights.
  • Global Privacy Control (GPC): We recognize and respect the Global Privacy Control (GPC) signal. When your browser broadcasts a valid GPC signal, we treat it as an opt-out request for targeted advertising.

Children's Privacy Protection (COPPA)

iFileSender is not directed to children under 13 years of age (or under 16 for European residents), and we do not knowingly solicit or collect personal information from children. If you believe a minor has provided personal data to us, please notify us immediately through our contact form so we can take prompt corrective action.

Contact Form Submissions and Support Data

If you voluntarily submit an inquiry through our Contact Us form, we collect your name, email address, message subject, and content, alongside a cryptographic hash of your IP address strictly used for anti-spam rate limiting. This information is retained solely to respond to your support request and is never sold or utilized for promotional marketing.

Data Security Measures

We implement comprehensive technical safeguards including TLS 1.3 encryption across all web traffic to ifilesender.com, end-to-end DTLS 1.3 / SRTP encryption for all WebRTC peer-to-peer data channels, volatile in-memory room signaling with automatic teardown after transfer completion or 15 minutes, and Cloudflare edge DDoS mitigation.

Policy Updates and Inquiries

We may revise this Privacy Policy periodically to reflect technological advancements, new features, or updated regulatory requirements. For any questions or privacy inquiries, please reach out through our Contact Page.